| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash67f53a639d57dd6237b5be86fe4f6c1b 287f09532dc331228d09c20b75f4160e91e9800a 41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2472
Cache-Control: max-age=139123
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:36 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:12:19 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd27590a1d3cbe1e9632b8ae92aaae3f4 202b34e8a0c3b88c8826fd56c6227b34f2cd6f46 6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17197
Expires: Sat, 19 Nov 2022 01:20:13 GMT
Date: Fri, 18 Nov 2022 20:33:36 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashd130218d0e2841f39c99610fe1a2ab90 29fbe1e177ee55c7a61ae0a206afff271cf5f945 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 19:45:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2913
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3a38b6dd8a4cc335c026aebf2ed348b6 8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8 8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4966
Expires: Fri, 18 Nov 2022 21:56:22 GMT
Date: Fri, 18 Nov 2022 20:33:36 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KaY7QMMbJZ19dlMTnbt/zpgZe7WAfgOxLjpdPaEbzLm32xwG3aTcwQ91dMQvUPqNgDjwQHi0Y3k=
x-amz-request-id: XAR7JYQPRQTQ6FP2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 19:53:03 GMT
age: 2433
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0dd9591ad0607f8070de227f9e61700d 114d69321d04d1e17ffac0a9e8e46539893cfe97 b7fbba9cfde616e2d00771b9f93be8b803d8dd064848ff9b399f82220e652421
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7FBBA9CFDE616E2D00771B9F93BE8B803D8DD064848FF9B399F82220E652421"
Last-Modified: Thu, 17 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21575
Expires: Sat, 19 Nov 2022 02:33:11 GMT
Date: Fri, 18 Nov 2022 20:33:36 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 19:44:49 GMT
cache-control: public,max-age=3600
age: 2928
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfe40cc6ea871d80382b6082111393fbe 281f75d0a35dc8ef908bb0500e57abd86bd5388e 6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5614
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:37 GMT
Last-Modified: Fri, 18 Nov 2022 19:00:03 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.223.160.237 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.223.160.237:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3f6Nr6puIfcqLqfhjrVn9A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4N5MgcaBuhdChBgwb0h3nKc2A2c=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17230
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 20:33:38 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17230
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 20:33:38 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17230
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 20:33:38 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash35da1192dcadc6e329a9e60c16904301 90a146aef85765630a5e09e46a0a8682e204bec1 816d1387a3a91a82f0bdaa2b703b45aa30be206d30d4dd1e8ac5deca13de57ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10281
x-amzn-requestid: 11dffc4e-71d7-4195-8890-62c8a2092728
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-77EWaIAMF3WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-3c0dc7e43023af827ac26958;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 48wUhxwMgsEj2J01EWOTCfWLNZPwFrjjXd6V_uSp8yae4YtGTTVlxA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:14:12 GMT
age: 80366
etag: "90a146aef85765630a5e09e46a0a8682e204bec1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash032386e5c9dffff1ba1ee5e8a322d438 dd4fd6c803a9b333bace9a541c6bd183d0c56bb9 0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CHi9V7-WaWmG6Y0249CZJnhe_RjvleaGFVXoOnJ62cjrcXoLLKwzgw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 18:45:50 GMT
age: 6468
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg | 34.120.237.76 | 200 OK | 3.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5d0b6106f00f9fd8b89c2d484a559a1a 399ac393209dcdac7d2188d7aa8d95f04570ef7c 5d8151c9eb558f4a2b8bd2952c6845606ddb0c27e36f6e49aca7e60908cd9fe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3759
x-amzn-requestid: 8c91ac59-89dc-4218-b69f-0cebb29f301b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-wJHgxoAMF-hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab33-4dac305614a92bc52c038222;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mb2-PTjNmt06Wd5jOjQ5WoLY-0NgI80CKPXtwgzBt4n5km8Pu_WN0Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:50:49 GMT
age: 81769
etag: "399ac393209dcdac7d2188d7aa8d95f04570ef7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha9d32fa3866dd741de610a61a93ad893 4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e 4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mhgNSp1_LsVmn00ULm116flMHpnfE6G6JABrJwXH5i4q-isv_W1-Ig==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:34:18 GMT
age: 82760
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash30ad43f65949e7e22e73292e3d684f3d 9404b0071027ac7ec0055a9edfbd607e3a8ae501 b97961cbd2245f9927c1c0406451449d28cca24c98c534cace78321ac62eeeb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5955
x-amzn-requestid: fe915fbe-b1dc-4fbd-8a10-1cb46e08f56c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqPjHloIAMFidw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755730-16deb73f48305b0139b1d9bd;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qtpQ9y_8ohoqKpvTx-mWM439VyjZnpmTKKCEAEnknL3CVN8ZkiJaYQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:39:46 GMT
age: 82432
etag: "9404b0071027ac7ec0055a9edfbd607e3a8ae501"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7d16e5ff718353c095d266b080fe547f fa7c5c9a1d16355859196271f3d13f3850931888 9a94d8eb20cc56d0898b1e2b80c0006ebbef75c15ad94e907050c5be4e19a960
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10349
x-amzn-requestid: fc85e078-a81a-4fed-899e-15249961f59c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7tHGLIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7d-4224d193517794684fcdc0ad;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UK-XD_8EcfPwfLb-QVwfLr8aG-sqVBoUJcbPb5hKAlQS68eOxdgM5g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:03:27 GMT
age: 81011
etag: "fa7c5c9a1d16355859196271f3d13f3850931888"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/ea/index.php?qbot.zip |  91.188.226.150 | 301 Moved Permanently | 0 B |
URL HTTP/2amorerestaurant.nl/ea/index.php?qbot.zip IP91.188.226.150:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /ea/index.php?qbot.zip HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 18 Nov 2022 20:33:39 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/7.3.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://amorerestaurant.nl/ea/?qbot.zip
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/ea/?qbot.zip | 91.188.226.150 | 301 Moved Permanently | 0 B |
URL HTTP/2amorerestaurant.nl/ea/?qbot.zip IP91.188.226.150:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /ea/?qbot.zip HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 18 Nov 2022 20:33:40 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/7.3.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.4.3 | 91.188.226.150 | 200 OK | 911 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.4.3 IP91.188.226.150:0
File typeASCII text, with very long lines (3276), with no line terminators Hash5d670b5def8387bbd5e614f9d309a592 586928ec81bdc4f13d851e7a5c7915ec9f343512 f45ed68d669ede39822d665dbfbe36381eb01bf9e3c38f1ac40e9fb50098973c
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.4.3 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 911
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:04:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 91.188.226.150 | 200 OK | 12 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP91.188.226.150:0
File typeASCII text, with very long lines (47826) Hashc4d7cc056b49b00e05cc29cc59aa3d5a 48c426bec60099d2a8628df430ed682c72aab42a 8009c12f2674a8d38401f4b5faad1fef2cfcd18a8c927ed2561ae9d7de9b57b5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 11616
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.4.3 | 91.188.226.150 | 200 OK | 18 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.4.3 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash64f293be0985484e1634368bc756ec56 55644171b2139baf5c48a53cfbe0e16f8dee1f22 c284816558860cf0b41df7cd0c9068c2235a1e82b8f037ca2090044285502681
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.4.3 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 17637
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:04:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/css/classic-themes.min.css?ver=1 | 91.188.226.150 | 200 OK | 144 B |
URL HTTP/2amorerestaurant.nl/wp-includes/css/classic-themes.min.css?ver=1 IP91.188.226.150:0
Hashfcbd239f30d9a6dd1f3637f291143d37 2871bf7d98af3f43e42f7fa32808048e7134fabf c2f98e9d71f782b7a3266cd337c61ae6c8dcbb7203669c07852aa2ab65ab6144
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 144
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 | 91.188.226.150 | 200 OK | 824 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 IP91.188.226.150:0
Hash269ed2215d4adf9265132f4135d49185 2e1bf415040627ed8041c1444de11034efe66f89 dad114286e260217aae476d3c4f7da41e7356438bb63a4e742787c6463e19963
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 824
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:30:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.0.5 | 91.188.226.150 | 200 OK | 4.7 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.0.5 IP91.188.226.150:0
Hash2ebe6380b8d4175c0891e5d31d8b27ae d90a96e9e13521e96e0ee08ca78a1da6a72ee0f3 fd6bfebce088d408753d5d226e4c40261fbcbeadc2fc9f082afe1cf2762f0298
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.0.5 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 4686
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 18:05:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.0.5 | 91.188.226.150 | 200 OK | 825 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.0.5 IP91.188.226.150:0
Hash90aaffc001d2ffb60072699bdd052fff 770c30fe368c633b065256d1689b2d6e7a10867c 6a68e64472a3c944b9fb14b28501f5f2784ebb88890f1561b864899c2fd68025
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.0.5 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 825
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 18:05:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| amorerestaurant.nl/wp-content/plugins/g-business-reviews-rating/wp/css/css.css?ver=6.1.1 | 91.188.226.150 | 200 OK | 16 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/g-business-reviews-rating/wp/css/css.css?ver=6.1.1 IP91.188.226.150:0
File typeASCII text, with CRLF line terminators Hashdbe7013453ecf875c347783b3262f7f5 1ae1d9ad2d33e040048a7f3758b8aafa012ff5a8 8e34065c65d78a11ee04917307a3b56a22c463c98a02ae7b1a9c622c74e29dbb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/g-business-reviews-rating/wp/css/css.css?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 15940
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:42:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.1.0 | 91.188.226.150 | 200 OK | 2.4 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.1.0 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (17923), with no line terminators Hashec41958d4b8e3f562fd97efea3e9a63e 550251108c88e60743ce55b0938aaf41f62c29bd 54bcac6e842100dfe2b97bdbebd393f71d934adc136eba5ddcc8174804b4fc5a
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 2373
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.1.0 | 91.188.226.150 | 200 OK | 8.4 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.1.0 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (62789), with no line terminators Hash9834791a56176f4340f5a795e699c0f4 efd08256f0b0c0add6b6759f29b20087c47a7eb6 264b381ca91c85d7ce5b9863f439be26c19c2d6fa75a2c7a6b486cb3f24892d5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 8444
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/app.css?ver=1.0.0 | 91.188.226.150 | 200 OK | 10 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/app.css?ver=1.0.0 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (410) Hashda9ebc375b1bf6ff273ec57ce37848c5 357e5c5e52446986dba49c9e2c2f366a9bd2bb42 8d51b4fb74233c8d02457967599bb15f90fbbb09dadaed7d56c0a827fe60e146
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/css/app.css?ver=1.0.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 10159
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Tue, 02 Mar 2021 14:05:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/custom.css?ver=6.1.1 | 91.188.226.150 | 200 OK | 0 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/custom.css?ver=6.1.1 IP91.188.226.150:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/css/custom.css?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 0
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 25 Jun 2020 10:32:52 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/font-awesome.all.min.css?ver=5.9.0 | 91.188.226.150 | 200 OK | 12 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/font-awesome.all.min.css?ver=5.9.0 IP91.188.226.150:0
File typeASCII text, with very long lines (55782) Hash6420d8c1049886863d01a8d41d2524d3 347940a7343ec50c9acae206a3ee66ccbac7bf59 8959884ee5cdbf9e8ff9d2fbdafbdeb211f31290bbaf19bea8807311dfcc56bd
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/css/font-awesome.all.min.css?ver=5.9.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 11727
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/color.schemes.css?ver=6.1.1 | 91.188.226.150 | 200 OK | 0 B |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/color.schemes.css?ver=6.1.1 IP91.188.226.150:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/css/color.schemes.css?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 0
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 | 91.188.226.150 | 200 OK | 6.7 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP91.188.226.150:0
File typeASCII text, with very long lines (30837) Hash5dbbe85d6a3308dceb97d91b740b0f11 3f70abf9963371962665167f98ba52365481496d 751d4fdd16bd33cc9c93bcaadcd316922ca9bbd74cb6a9e1705c8bef4330dabf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 6657
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 18:16:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/style.css?ver=6.1.1 | 91.188.226.150 | 200 OK | 17 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/style.css?ver=6.1.1 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (2803) Hasheaacf3a73f6d713c1e852ed631289411 3a5c279449dba1f087eaedc60a7299fef373c4b4 4ff19d9106449c5001723d9fc4839dbf7ab2f0c69a06d8db839dd4a1d145aa19
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/css/style.css?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 16719
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Sun, 03 Jan 2021 08:47:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/bootstrap.min.css?ver=3.3.7 | 91.188.226.150 | 200 OK | 21 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/css/bootstrap.min.css?ver=3.3.7 IP91.188.226.150:0
File typeASCII text, with very long lines (65324) Hash123062a501318cc73759315eaeffca9c 0542dbfd3008893ffcf9cfbd31783b14523adf4e e37a08be15644b88b5b90bad49a9282d36ececef5f1bd98b74640728bcfa0a3c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/css/bootstrap.min.css?ver=3.3.7 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 20941
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| maps.googleapis.com/maps/api/js?key=AIzaSyCjkssBA3hMeFtClgslO2clWFR6bRraGz0&ver=6.1.1 | 172.217.21.170 | 200 OK | 53 kB |
URL HTTP/2maps.googleapis.com/maps/api/js?key=AIzaSyCjkssBA3hMeFtClgslO2clWFR6bRraGz0&ver=6.1.1 IP172.217.21.170:0
File typeASCII text, with very long lines (2453) Hash581b1d2cce3bb626c4be838dc5541819 8745b127e3cafe5febfbf8e278f900c0c3a27a3f 2173e9ab04f95ea09bc7286c19cc4216d9161e9cbab23cc5825c9b79af294efa
GET /maps/api/js?key=AIzaSyCjkssBA3hMeFtClgslO2clWFR6bRraGz0&ver=6.1.1 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Fri, 18 Nov 2022 20:33:42 GMT
expires: Fri, 18 Nov 2022 21:03:42 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53354
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=18
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/plugins/owlcarousel/owl.carousel.min.css?ver=2.3.4 | 91.188.226.150 | 200 OK | 915 B |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/plugins/owlcarousel/owl.carousel.min.css?ver=2.3.4 IP91.188.226.150:0
File typeASCII text, with very long lines (3184) Hash6a92a9ec6c4f2b4d1e1528d0a6a33d88 5af68f48530fdb2bac19b2cd0eb3ebe183f90f47 d0673931f5a3f471ea23b2ed4816304b70ed9008c5382ae2954bae941a34d252
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/plugins/owlcarousel/owl.carousel.min.css?ver=2.3.4 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 915
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=2.0.6 | 91.188.226.150 | 200 OK | 683 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=2.0.6 IP91.188.226.150:0
Hash5d0b7f5c7ab3cff5bc41c0d808ea25a1 3af31f368fefad35e40f0f45c2ed734fa3d6bc3e e939d7b937caaa02f16b395388e062bca7d36a91b506f36d9e2a2b2c25266001
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=2.0.6 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 683
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:34:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/fbMyAccount.css?ver=1.0.0 | 91.188.226.150 | 200 OK | 1.8 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/fbMyAccount.css?ver=1.0.0 IP91.188.226.150:0
Hash946305f9de1af19ca9ce1ac3162f3983 141b4d3af43bdd1b00714ce5aec59ed14ea79bdc 068c2a7f129af075aafe98a04786ed1ca546e0f9514c0de6185d2f9f5bffc181
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/css/fbMyAccount.css?ver=1.0.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 1756
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Tue, 07 Jul 2020 15:44:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/datatables.css?ver=1.10.18 | 91.188.226.150 | 200 OK | 2.2 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/datatables.css?ver=1.10.18 IP91.188.226.150:0
File typeASCII text, with very long lines (368) Hash1e1ef1987f13cb625691a5c07bfec061 ebdf8e5930b2cc53085f78cac661f140c2c5621f 5f8eeb7e17b13f5064a8be619ad3863a5fdece2a52007e75c390141565644303
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/css/datatables.css?ver=1.10.18 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 2237
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Tue, 20 Oct 2020 15:32:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/flexslider.css?ver=1.0.0 | 91.188.226.150 | 200 OK | 1.5 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/flexslider.css?ver=1.0.0 IP91.188.226.150:0
Hash04f17012d38307d2bc1d9a17bebb8ebc 6a2318e5c583e9749649430216f5ed24f8318884 aa6758f98d501263678a7ccfebe7887fd144cd2fde292905ec7446e9f89bfc0a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/css/flexslider.css?ver=1.0.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 1451
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Tue, 23 Feb 2021 17:05:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?ver=2.0.5 | 91.188.226.150 | 200 OK | 1.6 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?ver=2.0.5 IP91.188.226.150:0
File typeASCII text, with very long lines (401) Hash8dc68eb9072179f0299a68e26577f79f d439a2d7138e2c006701c6cf99249e11bb7170d9 97c5ca2592a6fa91577d8c0472c82bb1e642b5eb43b03cbcfc3d91235fcde9c7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?ver=2.0.5 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 1601
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 18:05:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 91.188.226.150 | 200 OK | 2.4 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP91.188.226.150:0
File typeASCII text, with very long lines (6475), with no line terminators Hash4e773d7cec56bacab6d2db420be6f262 c95573d884c1caec0ec9c6f3e2a8c0fbf28d939a 5c8839d0b02f21e8d83d856bbf85a6b87fbedf9ba0b70711b11a1c378d5443e7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 2354
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Tue, 24 May 2022 21:58:05 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 | 91.188.226.150 | 200 OK | 3.8 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 IP91.188.226.150:0
File typeASCII text, with very long lines (12987), with no line terminators Hashaeed4395ecf003f676da91a15c6f480a 7fd4fe08f1fe55d0da4e60dd49384b1fa31ab0fe f5df04123f2022862a56b4a547cf4b0bebb54a6fc1dc6313c460f927d6902919
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 3837
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:30:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.5.6 | 91.188.226.150 | 200 OK | 1.3 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.5.6 IP91.188.226.150:0
File typeASCII text, with very long lines (3980), with no line terminators Hash6f94a82fec76b7a761821a83fbc56ab2 8950bb6fb0ccee545e6bcfd5b2b84a1ad02f9976 96086dabab4dc958af735bdcb779f6a277e771e4421b625226ae811aa269096b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.5.6 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 1345
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:46:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/js/jQuery.print.js?ver=1.6.0 | 91.188.226.150 | 200 OK | 2.9 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/js/jQuery.print.js?ver=1.6.0 IP91.188.226.150:0
Hash1d4422238136c947faf1d9fd4f55ef38 be3402d91959c30898366cd741efa097a8f4e683 09510875810457d98a4dca31796f3ea3948495b76740e40e57d55885cd031a92
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/js/jQuery.print.js?ver=1.6.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 2915
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Tue, 02 Oct 2018 08:51:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/style.css?ver=6.1.1 | 91.188.226.150 | 200 OK | 399 B |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/style.css?ver=6.1.1 IP91.188.226.150:0
Hashb93e9d873417aff6f8fb747c9827e61f 134398ee25012c416808369fa66810ebdb644f57 af7b8fef9fad55e4f9b6fa3e89d725f61dc059df527fab6c2b62d2e2b294e3f5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/style.css?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 399
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Feb 2021 17:25:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/g-business-reviews-rating/wp/js/js.js?ver=6.1.1 | 91.188.226.150 | 200 OK | 2.2 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/g-business-reviews-rating/wp/js/js.js?ver=6.1.1 IP91.188.226.150:0
File typeASCII text, with very long lines (352), with CRLF line terminators Hash3192f099137ccf35d831db3e8c420826 cb2945d41c31dd5b1c5df3665b21d6ba200afce4 766f7095ff8a904ec28a9f2ba2c1eb3f36897feffd47c6939d6e3d020f5507b6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/g-business-reviews-rating/wp/js/js.js?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 2181
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:42:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.0.5 | 91.188.226.150 | 200 OK | 7.9 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.0.5 IP91.188.226.150:0
Hash0958b27a42c20640f482887d89d93547 62f614f45cc7a395583d56202fd754bb031c929d 3b19f54ed935d1616a45b11d9595828fa7b26194f6674b9b261decb4571c8b33
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.0.5 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 7861
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 18:05:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 91.188.226.150 | 200 OK | 4.0 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP91.188.226.150:0
File typeASCII text, with very long lines (11126) Hash7e058b51f939eacfa31cdface14dded5 9d732e5afdeb42edef9e1b9631b7e95e054787cc 4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 3995
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/uploads/2021/01/Account.svg | 91.188.226.150 | 200 OK | 260 B |
URL HTTP/2amorerestaurant.nl/wp-content/uploads/2021/01/Account.svg IP91.188.226.150:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (360), with CRLF line terminators Hash819f713f65ff0505aa3d9a7a623c8ae3 9d5a5a79e525b58f8947ac3e72151161800a22cf 30645da5dda3628f4025afd63d5e1e5cbb330060089f4dfdb07c605204f9e224
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/01/Account.svg HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: image/svg+xml
content-length: 260
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 08 Mar 2021 10:39:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/translatepress-multilingual/assets/js/trp-frontend-compatibility.js?ver=2.0.6 | 91.188.226.150 | 200 OK | 295 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/translatepress-multilingual/assets/js/trp-frontend-compatibility.js?ver=2.0.6 IP91.188.226.150:0
Hasheba0510b1082a8c6f178c458a7d9a0d7 9351f52c27342a2b2035b97145d709e080b52d40 0daeeff1865393199a7cac38e4ad32a6628a0864c5cc0a167026df67209075b9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/translatepress-multilingual/assets/js/trp-frontend-compatibility.js?ver=2.0.6 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 295
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:34:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 | 91.188.226.150 | 200 OK | 899 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 IP91.188.226.150:0
File typeASCII text, with very long lines (1668) Hash22d65ba38528349e705d912ce26bf8ac c89ba006009043d93b88ff155b4fec8797330550 6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 899
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.1.0 | 91.188.226.150 | 200 OK | 670 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.1.0 IP91.188.226.150:0
File typeASCII text, with very long lines (2066), with no line terminators Hash82a4bb80f29fd8b251ac026d682f1529 0f9f3105ae887d44bbc296ddadd171ba3ee2e75e 95516630f841e1de482eba3c4bcc57991bbe6dbb13d88bb5a2583669d29a01a5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 670
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 | 91.188.226.150 | 200 OK | 3.2 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 IP91.188.226.150:0
File typeASCII text, with very long lines (9081) Hash700d3ca3b6f3e00a4c59f7ca3353e5ac c4fb56a1dd52567489e3c35030fcbc430ec9d371 513764573155698d580bfcbb7c0d6f02cfef9326ae4b4809148b915103ffe895
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 3232
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 91.188.226.150 | 200 OK | 30 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP91.188.226.150:0
File typeASCII text, with very long lines (65447) Hash3a1740685bd5c0bbd5f2b812e1eb7fb4 488e07695da787fed18361c50292aef35abb5e81 4a07aed2d8cf88afdec0b56b365b951c76d387db3459166b5a0d25e2e6cc95ef
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 30324
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook-core/assets/js/subscribe.js?ver=1.0 | 91.188.226.150 | 200 OK | 373 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook-core/assets/js/subscribe.js?ver=1.0 IP91.188.226.150:0
File typeASCII text, with CRLF line terminators Hashc201346e602531598fb0cf32cf3f2276 b624327d6b1992bd0a7bd37f6b6ddca08101af05 2611daf4459e3ee2d831e578b9f130424478649126c9f4a2a5c0060ca492c5fc
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook-core/assets/js/subscribe.js?ver=1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 373
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 08 Mar 2021 10:22:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash0246543c536d9848b699ffaec61483df 650d0bcf20a2cbbdd03ed1d91d516e337805fb83 eca2ef4f0d8bc7064d00dd72e4b09cac40a7b819d2fcc1ca72a9e369e83efcf1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=120770
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Etag: "637720e8-117"
Expires: Sun, 20 Nov 2022 06:06:32 GMT
Last-Modified: Fri, 18 Nov 2022 06:06:32 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| amorerestaurant.nl/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-after.js | 91.188.226.150 | 200 OK | 392 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-after.js IP91.188.226.150:0
Hash520f3f16d29be5a01f66c96a5c11c790 a530abe8b625f789f83699d0addab96f3df67970 cb7a041eb72ba46b9b588b53db6a67a558340e816ea9c29dfdbf7a4e97674583
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-after.js HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 392
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:40:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 91.188.226.150 | 200 OK | 6.3 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (17819), with no line terminators Hashfecbc00e8af71d8cfb678cd811c7cb2e 44e5dd77f62cb5c67271442b75cdff10d45f2f8d d6f03fb4728d0c23251451df8d66b5107d3c87458dc624aacfbad437e99d01f1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 6335
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 91.188.226.150 | 200 OK | 6.8 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash3d0ff0f6731d9cef860af9a5a0e3ce62 13aed444304d782039e261475c8b4450b83e743e e8d05db77732c71843ced6f386ea82eb32243ac36e7ca3e071cb7f53e2ffbce5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 6800
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/wp-util.min.js?ver=6.1.1 | 91.188.226.150 | 200 OK | 690 B |
URL HTTP/2amorerestaurant.nl/wp-includes/js/wp-util.min.js?ver=6.1.1 IP91.188.226.150:0
File typeASCII text, with very long lines (1391) Hashebe552e54e3815c6867913d252ff2a79 4982bd9ba944833e821be18419ad8408290f5d75 8b0aedc73b1d41ab59c0ad42553259c90458cfb72b149946a3bae3298c012e40
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 690
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.2 | 91.188.226.150 | 200 OK | 6.3 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.2 IP91.188.226.150:0
File typeASCII text, with very long lines (15446) Hasha0504724dbb256f37f15c469425c485f 76555844ad15af75402eb4ad920c22ba7a04d5a2 3e1676b98a3940b1f593b134a08979a125a4373f46484d5a743c3e1ced915a39
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 6309
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce-additional-fees/js/wc_additional_fees.js?ver=6.1.1 | 91.188.226.150 | 200 OK | 1.3 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce-additional-fees/js/wc_additional_fees.js?ver=6.1.1 IP91.188.226.150:0
Hash8db27adbb4672b59be6ff8fdef65c7d2 039d02395afcddb0dc123667106ad7de39595536 9f5a713bb1d73bf4068201b13b5d40d02ae5c61960ec08990b98583bc097d639
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce-additional-fees/js/wc_additional_fees.js?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 1257
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Sat, 05 Jun 2021 21:51:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.1.0 | 91.188.226.150 | 200 OK | 970 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.1.0 IP91.188.226.150:0
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hash155d874ef60217f790dedec58e83d832 42a2698adec25b2000046cf7e3818e6478951fc3 c6801f4d5dcdd86ba3e33dc35a8765c03fd55e9f621443dd0fb7cd8c8e6707da
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 970
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/js/jquery.menu.min.js?ver=6.1.1 | 91.188.226.150 | 200 OK | 555 B |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/js/jquery.menu.min.js?ver=6.1.1 IP91.188.226.150:0
File typeASCII text, with CRLF line terminators Hash3056eddf7068b84897bc2247230e5776 cc967eb9382b741abf5e8a4ba83ce80ff4efa4e6 0e3d40f44de1ee9a421208ba2f3a7ae709f0e20dae4b696ef5d69a1ea3970edd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/js/jquery.menu.min.js?ver=6.1.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 555
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/js/bootstrap.bundle.min.js?ver=4.3.1 | 91.188.226.150 | 200 OK | 21 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/js/bootstrap.bundle.min.js?ver=4.3.1 IP91.188.226.150:0
File typeASCII text, with very long lines (65297) Hashd2f16de004752d026183f45775ae3e01 f39f6b3d60596f774544521ded93562903a6b5af f70187c88b9e749912679c513adde6a9f22035abf3f50babecd9e4dac7511839
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/js/bootstrap.bundle.min.js?ver=4.3.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 21380
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.6 | 91.188.226.150 | 200 OK | 1.3 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.6 IP91.188.226.150:0
File typeASCII text, with very long lines (2065), with CRLF line terminators Hashd2606b79036b2d6547998ad1738d61d8 fd09238686037046efb8e3ef09e16a73e947f2e6 086ec3a74132846b6120942c4e2da4056b701a0a30feccdac5e6e384c7be0863
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.6 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 1343
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:46:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/plugins/isotope/isotope.pkgd.min.js?ver=3.0.5 | 91.188.226.150 | 200 OK | 9.6 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/plugins/isotope/isotope.pkgd.min.js?ver=3.0.5 IP91.188.226.150:0
File typeASCII text, with very long lines (32004) Hashc3276e6deb5aceac3a929e30d0a31c99 e972f225499625c94f553fb85764b5975ab4e01b c5a14f5501be889bc3b2b12a65339d802e4015f4c8450ed03af9a4092429cb7a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/plugins/isotope/isotope.pkgd.min.js?ver=3.0.5 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 9626
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Sun, 28 Jul 2019 10:00:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/plugins/owlcarousel/owl.carousel.min.js?ver=2.3.4 | 91.188.226.150 | 200 OK | 11 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/plugins/owlcarousel/owl.carousel.min.js?ver=2.3.4 IP91.188.226.150:0
File typeASCII text, with very long lines (31997) Hash3cb10c6c01ef15e7d2c5ef33c6f06ee5 561a0008fd649a946ff6cdba379547c998cb4582 2107b826f18f7f10f78a38641124da03dad389704816a86136488123a0f01f3d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/plugins/owlcarousel/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 11139
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 29 Jul 2019 03:29:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2 | 91.188.226.150 | 200 OK | 6.2 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2 IP91.188.226.150:0
File typeASCII text, with very long lines (22735), with no line terminators Hash53724f40cacd0cbd97223cd3b75ab563 50075fc555845507868eacf8be45ac5bd8b92e72 91b479890275cd54e7104f7043d0f5896aea80411c9e3de6ae2c3c8973e42188
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 6227
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/js/main.js?ver=1.0 | 91.188.226.150 | 200 OK | 2.1 kB |
URL HTTP/2amorerestaurant.nl/wp-content/themes/foodbooktheme/assets/js/main.js?ver=1.0 IP91.188.226.150:0
File typeASCII text, with CRLF line terminators Hash64baaef02bcd3ca9aa9e8660a3d0f234 6b7f77da2f39ab95103a878e29969bd23f235cec 3f50d9f113bf71cd89edb5bdf848c0735ff7f6fe1a3117504deca69d4ffd94fe
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/foodbooktheme/assets/js/main.js?ver=1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 2051
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Sat, 02 Jan 2021 14:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.1.0 | 91.188.226.150 | 200 OK | 934 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.1.0 IP91.188.226.150:0
File typeASCII text, with very long lines (2938), with no line terminators Hashef8ddf2830341f13634a12266fa9813f 45c12d8b054261b0597ffdb97ff55f8ab7a913c4 698fbd0089cafb0659518bf2359ce5c990e71c9a543338fdc7b1595ee11ade22
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.1.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 934
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Wed, 10 Mar 2021 10:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/underscore.min.js?ver=1.13.4 | 91.188.226.150 | 200 OK | 7.2 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/underscore.min.js?ver=1.13.4 IP91.188.226.150:0
File typeASCII text, with very long lines (18798) Hashf4bb18d2e152ba945cb63980362f40e9 925f93a6c4ee411e97d8dc3186f9d66c4b5169ab 16ab496a6c74f5f272f7a5c31e9cb69c753fea994396ef6deacf641180ad317b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 7179
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-before.js | 91.188.226.150 | 200 OK | 541 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-before.js IP91.188.226.150:0
Hashb8b8245d035cdba5e9d895fd6e3bb8aa 254bef0624d2a537496e4c71e3b4a9a15af4dfb6 239f11024d23aca5be7321421ac31bc30b047bb398ee412bfd7cb9f5c40ac9eb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-before.js HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 541
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:40:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/the-events-calendar/common/vendor/datatables/datatables.min.js?ver=4.14.1 | 91.188.226.150 | 200 OK | 67 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/the-events-calendar/common/vendor/datatables/datatables.min.js?ver=4.14.1 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with very long lines (538) Hash03c69549cbf2311ab36e0e3202a3264a b299c554d4ac031b9f01c92fab7b47961110dc8f 445050550751fb61542fb0fe6826f96f7caca12a9b3c166d9822cab50d08fbf8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/the-events-calendar/common/vendor/datatables/datatables.min.js?ver=4.14.1 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 67059
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 05 Aug 2021 17:40:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2 | 91.188.226.150 | 200 OK | 10 kB |
URL HTTP/2amorerestaurant.nl/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2 IP91.188.226.150:0
File typeASCII text, with very long lines (36548) Hashfa5758a091d6cb4ef9da7d14c9f8b4ea 64991dd17eac6c58c395cb383df447fb4af5581d 9467b257684b8aaae4a7c7ca7d8baf3f4ca4cdb3b6944f67e63ea880c299ef39
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 10498
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Fri, 18 Nov 2022 06:34:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/js/foodbook.js?ver=1.0.0 | 91.188.226.150 | 200 OK | 14 kB |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/js/foodbook.js?ver=1.0.0 IP91.188.226.150:0
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash90053a6193516d611a3dcd1730fd22ec 370fce0f1b90de4743aff2ceed77750218a6c2a4 b9c94cdf9ec15c9738ae15e93f44427c2a294d7c115c7e732bc97b3afecbc3c4
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/js/foodbook.js?ver=1.0.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
content-length: 13909
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Sat, 05 Jun 2021 21:29:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/favicon.ico | 91.188.226.150 | 404 Not Found | 6.4 kB |
URL HTTP/2amorerestaurant.nl/favicon.ico IP91.188.226.150:0
Hashd51e54e12563c46b59d92fd393855fe3 81f5ee277a6abae017011016b63a08903430a196 3fde47123e0e3c4c48063cc77cd8e4ff31f8e437c6b26fde61b336ab0925285f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp2.globalsign.com/gsalphasha2g2 |  104.18.21.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.21.226:0
Hash3cc0948c105455ee495f4e925f70bf41 dbb64eb43080a374322139fe1de52cd864afe36d 770965f076bb6072043efe980a69cfb1a743a29843f5af8b594ac07bf2da0c69
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 20:33:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 22 Nov 2022 19:16:55 GMT
ETag: "dbb64eb43080a374322139fe1de52cd864afe36d"
Last-Modified: Fri, 18 Nov 2022 19:16:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1982
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c37b91d8e0b50f-OSL
|
|
| counter.yadro.ru/hit;csnenalpha?r;s1280*1024*24;uhttps%3A//amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/%3Fqbot_zip;0.6003137593360821 |  88.212.202.52 | 200 OK | 43 B |
URL HTTP/1.1counter.yadro.ru/hit;csnenalpha?r;s1280*1024*24;uhttps%3A//amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/%3Fqbot_zip;0.6003137593360821 IP88.212.202.52:0 ASN#39134 United Network LLC
File typeGIF image data, version 89a, 1 x 1\012- data Hashfc94fb0c3ed8a8f909dbc7630a0987ff 56d45f8a17f5078a20af9962c992ca4678450765 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;csnenalpha?r;s1280*1024*24;uhttps%3A//amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/%3Fqbot_zip;0.6003137593360821 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 18 Nov 2022 20:33:42 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Wed, 17 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
|
|
| counter.yadro.ru/hit;csnenalpha?r;s1280*1024*24;uhttps%3A//amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/%3Fqbot_zip;0.24205855618916172 | 88.212.202.52 | 200 OK | 43 B |
URL HTTP/1.1counter.yadro.ru/hit;csnenalpha?r;s1280*1024*24;uhttps%3A//amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/%3Fqbot_zip;0.24205855618916172 IP88.212.202.52:0 ASN#39134 United Network LLC
File typeGIF image data, version 89a, 1 x 1\012- data Hashfc94fb0c3ed8a8f909dbc7630a0987ff 56d45f8a17f5078a20af9962c992ca4678450765 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;csnenalpha?r;s1280*1024*24;uhttps%3A//amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/%3Fqbot_zip;0.24205855618916172 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 18 Nov 2022 20:33:42 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Wed, 17 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashc90303c407dfd12d57de9f09b66649e4 6fe44aaefecaafa0fdf43711b6ab575a485c8359 cd545898c2ba09adf1541d3e4dcf3b16db9c509a3d98afce03b54862f1daba46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=125819
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Etag: "637734a1-116"
Expires: Sun, 20 Nov 2022 07:30:41 GMT
Last-Modified: Fri, 18 Nov 2022 07:30:41 GMT
Server: nginx
Content-Length: 278
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashc90303c407dfd12d57de9f09b66649e4 6fe44aaefecaafa0fdf43711b6ab575a485c8359 cd545898c2ba09adf1541d3e4dcf3b16db9c509a3d98afce03b54862f1daba46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=125819
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:42 GMT
Etag: "637734a1-116"
Expires: Sun, 20 Nov 2022 07:30:41 GMT
Last-Modified: Fri, 18 Nov 2022 07:30:41 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
|
|
| fonts.googleapis.com/css?family=Open+Sans%3A400%2C500%2C700&subset=latin%2Clatin-ext | 142.250.74.10 | 200 OK | 5.8 kB |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans%3A400%2C500%2C700&subset=latin%2Clatin-ext IP142.250.74.10:0
Hash8f6e9a9137ad6285e55e31d98cf58c29 c0a108d3cd0bb45485e28a01608bfc41c6cb5cdd 1c4ff97f45faed7d361af42e225345b5fcf81e034d95cdc0430be08f084a0283
GET /css?family=Open+Sans%3A400%2C500%2C700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 20:33:42 GMT
date: Fri, 18 Nov 2022 20:33:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Lato%3A400%2C500%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700&ver=2.5.6 | 142.250.74.10 | 200 OK | 4.1 kB |
URL HTTP/2fonts.googleapis.com/css?family=Lato%3A400%2C500%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700&ver=2.5.6 IP142.250.74.10:0
Hasha6853f983fa739758fc0389da4817ee1 8a8b3c191cb35e78cb11d18da6eb46365c412b1d 617a73e829a730ea9bbc0d98da7ab06eb40c8ee9e793e15f08d04017cf99e3de
GET /css?family=Lato%3A400%2C500%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700&ver=2.5.6 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 20:33:42 GMT
date: Fri, 18 Nov 2022 20:33:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/font-awesome.min.css?ver=4.7.0 | 91.188.226.150 | 200 OK | 550 B |
URL HTTP/2amorerestaurant.nl/wp-content/plugins/foodbook/assets/css/font-awesome.min.css?ver=4.7.0 IP91.188.226.150:0
Hashcd5d5c1b81aa1d81b7ab28ed209b1873 d95757b561bcb7632869c8e0d791781b47869433 698826f814b82578c37ecc67971e17fbc50b86d71c03eeb89cb03d402629d16c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/foodbook/assets/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/css
content-length: 12166
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Thu, 18 Jun 2020 13:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://eugamblers.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:34:08 GMT
expires: Thu, 16 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 176375
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://eugamblers.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 18:53:49 GMT
expires: Thu, 16 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 178794
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| eugamblers.org/lendings/NEW-PLAYAMO-CPA/22BET/EN/ | 104.21.23.42 | 200 OK | 4.4 kB |
URL HTTP/2eugamblers.org/lendings/NEW-PLAYAMO-CPA/22BET/EN/ IP104.21.23.42:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash04af3807ae9f0f8918a9671986d1f32c 32a1b3f768f80e6e11bc69b1a02b16e0fc6c264f 16c617ec6366a6190d5dfd6b29dceeeebde9ecc81cf1a6e4136f91e295876eb1
GET /lendings/NEW-PLAYAMO-CPA/22BET/EN/ HTTP/1.1
Host: eugamblers.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: frame
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.6
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgYXR%2B8wSTWJ4FXWPTPPf%2BUk9HFGf3WEVQje52yBaNxD9jpvwq3qyIgJZfROwwIkh8FoE3%2FoSYkRCG%2FL8FzRLKQdK1r5DS2v92EczNU64IyJkntWgCr6zXbzqWAO7KUsVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76c37b9268f3b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:33:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash05289172c1455c4134e496c6f4606efd ce1bb33256b0754f9acc01e7e9f3e5dc85f89244 a8b4411a0310cc376efe2aec7c0830b8d3b63b8827631b0ff43ec092f1f80f82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12065
x-amzn-requestid: 45c97153-71c7-4985-a1ad-fc21a509d153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K5FyVIAMFtDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-0f9d22dd544a4580570f3089;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dxT2WJB7m5tUhgBn2PwTIN4Zskzm3X7CW-29hl1nCyNPbKt5j6q5iA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:27 GMT
age: 81498
etag: "ce1bb33256b0754f9acc01e7e9f3e5dc85f89244"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/wp-content/uploads/2021/03/logo.png | 91.188.226.150 | 200 OK | 0 B |
URL HTTP/2amorerestaurant.nl/wp-content/uploads/2021/03/logo.png IP91.188.226.150:0
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/03/logo.png HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: image/png
content-length: 21304
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:33:42 GMT
last-modified: Mon, 08 Mar 2021 11:00:40 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| internetslotsberlin.com/csnenalpha.js?ref=https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip&title=Eagle%20Pass%20Casino%20Reviews%20-%20Online%20vlt%20games%20and%20casino%20slot%20machines%20-%20Amore&httpref= | 172.67.154.176 | 200 OK | 0 B |
URL HTTP/2internetslotsberlin.com/csnenalpha.js?ref=https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip&title=Eagle%20Pass%20Casino%20Reviews%20-%20Online%20vlt%20games%20and%20casino%20slot%20machines%20-%20Amore&httpref= IP172.67.154.176:0
GET /csnenalpha.js?ref=https://amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip&title=Eagle%20Pass%20Casino%20Reviews%20-%20Online%20vlt%20games%20and%20casino%20slot%20machines%20-%20Amore&httpref= HTTP/1.1
Host: internetslotsberlin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amorerestaurant.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 20:33:42 GMT
content-type: application/javascript
x-powered-by: PHP/7.4.6
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: BYPASS
set-cookie: scheme_csn=YToxOntpOjA7aTowO30%3D; expires=Sat, 19-Nov-2022 20:33:42 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oSgXYnD7BuBWUhSyyyejoLGR%2BAO%2Fv%2FiiAmjiUS%2F27rMmk8ITrexq4I5C0Kuy9AERxPrygbUziMWKUg7k2vpDdZy08KppQ8V2M0w8UVLFdNElaGhyQTc%2FS3o4xQZF57WbXe0zyEk4vCO0sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76c37b904f9db4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip | 91.188.226.150 | 200 OK | 0 B |
URL HTTP/2amorerestaurant.nl/2021/04/21/eagle-pass-casino-reviews/?qbot_zip IP91.188.226.150:0
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /2021/04/21/eagle-pass-casino-reviews/?qbot_zip HTTP/1.1
Host: amorerestaurant.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:33:41 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
link: <https://amorerestaurant.nl/wp-json/>; rel="https://api.w.org/", <https://amorerestaurant.nl/wp-json/wp/v2/posts/3543>; rel="alternate"; type="application/json", <https://amorerestaurant.nl/?p=3543>; rel=shortlink
x-tec-api-version: v1
x-tec-api-root: https://amorerestaurant.nl/wp-json/tribe/events/v1/
x-tec-api-origin: https://amorerestaurant.nl
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|