Report - osthav.com/

Report Overview

Submitted URL
osthav.com/
IP
94.127.186.59
ASN
#50926 Axarnet Comunicaciones, S.l.
Submitted
2023-04-12 03:29:22
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
osthav.com	unknown		2020-07-23	2023-03-26	11 kB	2.5 MB	94.127.186.59
fonts.gstatic.com	unknown		2014-09-09	2023-04-11	1.1 kB	27 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-04-12	medium	osthav.com/
2023-04-12	medium	osthav.com/
2023-04-12	medium	osthav.com/wp-includes/css/classic-themes.min.css?ver=6.2
2023-04-12	medium	osthav.com/wp-content/uploads/us-assets/osthav.com.css?ver=c39cede4
2023-04-12	medium	osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=7.0.3
2023-04-12	medium	osthav.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.2
2023-04-12	medium	osthav.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load-native.min.js?ver=3.12.6
2023-04-12	medium	osthav.com/wp-content/themes/Impreza/fonts/fa-regular-400.woff2?ver=8.15.1
2023-04-12	medium	osthav.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1
2023-04-12	medium	osthav.com/wp-content/themes/Impreza/fonts/fa-solid-900.woff2?ver=8.15.1
2023-04-12	medium	osthav.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.2
2023-04-12	medium	osthav.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.3
2023-04-12	medium	osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	osthav.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.3	90 kB	2023-03-29	2024-04-16
Pretty URL osthav.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.3 IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 22:52:25 Last Seen2024-04-16 16:23:39 Times Seen102790 Hash 0e850a69bc7fd0acc2e92ce6eee87959 8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a Loading...

	osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c	6.9 kB	2023-03-08	2024-03-02
Pretty URL osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:51:07 Last Seen2024-03-02 14:19:23 Times Seen185 Hash 37aadaf2e517a76541bad9da566ed5be 06d94f9f615c59d85ffed50477d8a1efcf72d669 a17a84ba741867d730a41da798d9b8be81bfd545a5b22bcdf164f5c798d079c3 Loading...

	osthav.com/	2.2 kB	2023-04-12	2023-04-12
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-12 05:29:23 Last Seen2023-04-12 05:29:23 Times Seen1 Hash 70803a45142e33ba120e9e07215dd9da 6f28a85c3fb744137ae8e2e5abbcb14e3176cb27 185b736427a4a87b99d6d3e9fced02ad94eec2168d63896be61667ae64681a4c Loading...

	osthav.com/	383 B	2023-04-12	2023-04-12
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-12 05:29:23 Last Seen2023-04-12 05:29:23 Times Seen1 Hash 2008546e578f9894561656632289c42a 7222598c7a1bf29d5dfe0f5e1a6a4c7a7c01227f 573aea572e95e4ba4497ddf1ee63c6c9bd7f4a1e27e2a3a2fabf8b66d5879310 Loading...

	osthav.com/	104 B	2023-03-07	2024-04-16
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:33 Last Seen2024-04-16 17:53:08 Times Seen4262 Hash 3217923b47c3b4f1720c42f8cc99b87f 951a09e9e5b98a7ac8d114e42a743e5d41cb5dfb 39aa079dbe6286ef5a74421f2ca2a4d1b8f13b1c1506e51f0635a2c434b1b286 Loading...

	osthav.com/	210 B	2023-03-07	2024-04-15
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:38 Last Seen2024-04-15 14:51:03 Times Seen286 Hash 1acb2f9ed51483ae321e9bc661d7ecdc fbce7fd4f397c8d036bc5145fe112db1a7185a8f 8fab5416f96b1da395fc4744aeb29b13d40a33f00999d2dd6cb4287070e3093d Loading...

	osthav.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1	10 kB	2023-03-29	2024-04-16
Pretty URL osthav.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1 IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:17:20 Last Seen2024-04-16 16:23:39 Times Seen26009 Hash 7be65ac27024c7b5686f9d7c49690799 241ada4a86443adc5623d1a3a8018a96d9de6d5a 52db930f81d97113dde679cac624cb5435b56d4ac486e91a0b6692d2cb615a84 Loading...

	osthav.com/	902 B	2023-03-13	2023-04-12
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 05:13:08 Last Seen2023-04-12 05:29:23 Times Seen3 Hash 8185af888f3e4ec16c47ef69a3e41489 3ffd5c072df08a635017eda614c1ced41ee75fb2 54da36fd74e739f21563f5239c25221a236ff8ec6af86e61f179c26e921388cb Loading...

	osthav.com/	8.3 kB	2023-03-13	2023-04-12
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 05:13:08 Last Seen2023-04-12 05:29:23 Times Seen3 Hash 6c33e4b1c61212ffd9e654133c990c57 17cec28db1195e9aec9986097f9f65a32c9da806 6c2792b9fb9df530a692ed99fc62a3a33c1d0e300c395799d5becfe306068fd5 Loading...

	osthav.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1	13 kB	2023-03-29	2024-04-16
Pretty URL osthav.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1 IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:17:20 Last Seen2024-04-16 16:23:39 Times Seen37861 Hash 5bc2b1fa970f9cecb3c30c0c92c98271 7c6bb87aaa24714b7b3b3c86dd932736a80270a9 1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e Loading...

	osthav.com/	111 B	2023-04-12	2023-04-12
Pretty URL osthav.com/ IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-12 05:29:23 Last Seen2023-04-12 05:29:23 Times Seen1 Hash 57bd43d5781e3254dad53daebd27d3a7 50a1dd0c95f3108a714889fdc65708373e8e7f60 6fe77a32b60351827fe03ba418faaceb188d29af7535d0356e37b50413ebfa27 Loading...

	osthav.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8	8.7 kB	2023-03-14	2024-04-16
Pretty URL osthav.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8 IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 16:58:28 Last Seen2024-04-16 10:07:20 Times Seen3553 Hash 38f95416d5f7349b65699f64e6a587fd 2ca6f6f77481c3cdbcaacfc61a56c24f3c933ade 08756c47213d461baa3b01f42448a76d11f524470c7a34f9018733889bd4f49c Loading...

	osthav.com/wp-content/uploads/us-assets/osthav.com.js?ver=c3df62e9	147 kB	2023-03-13	2023-04-12
Pretty URL osthav.com/wp-content/uploads/us-assets/osthav.com.js?ver=c3df62e9 IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 05:13:08 Last Seen2023-04-12 05:29:23 Times Seen4 Hash bd26a3caa77c9fa9ed8efdc9acfc3c24 3c79eea256b3877bc6d31ed6b1fc2bdd821876c3 bc694e9f76e71226f5518750e8069452f86f9fda72c00b925b5ed3ac71ee05c8 Loading...

	osthav.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load-native.min.js?ver=3.12.6	9.5 kB	2023-03-08	2024-04-11
Pretty URL osthav.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load-native.min.js?ver=3.12.6 IP 94.127.186.59 ASN #50926 Axarnet Comunicaciones, S.l. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:58:28 Last Seen2024-04-11 15:14:48 Times Seen347 Hash b483fb2f6c9bed0c685a7c1ccfa0918b cadbdd3ab1af39d8f8ad033a6bc2dc74791f5c55 be6782a8a0617c64e1eaf887f6771ac1e4ead25232ffcf133e5cba77b7379e76 Loading...

HTTP Transactions (26)

URL IP Response Size

osthav.com/

94.127.186.59

200 OK

162 B

URL User Request GET HTTP/2
osthav.com/
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 12 Apr 2023 03:29:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://osthav.com/

osthav.com/

94.127.186.59

200 OK

12 kB

URL User Request GET HTTP/2
osthav.com/
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (22776), with CRLF, LF line terminators
Size
12 kB (11727 bytes)
Hash
f276bf9750266874368fff8cdb923f15
8c6e4946aab80bbd84b344f0974ed5e12faf11e2
af394e99af2802e082688819a916658a816fe1982a297eb1ef2790f35ef53c6c

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:07 GMT
content-type: text/html; charset=UTF-8
content-length: 11727
link: <https://osthav.com/wp-json/>; rel="https://api.w.org/", <https://osthav.com/wp-json/wp/v2/pages/16>; rel="alternate"; type="application/json", <https://osthav.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-cache-status: BYPASS
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2

osthav.com/wp-includes/css/classic-themes.min.css?ver=6.2

94.127.186.59

200 OK

210 B

URL GET HTTP/2
osthav.com/wp-includes/css/classic-themes.min.css?ver=6.2
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text
Size
210 B (210 bytes)
Hash
a8f5adb01a17d608468beca934ff9e95
20303241ccbdbd180fd959cdf4c263c258870067
bcdca1820dc365b0a6c38b70739928ffb660a1cee9776ce5682a5feedd2824a3

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-includes/css/classic-themes.min.css?ver=6.2 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
content-length: 210
x-accel-version: 0.01
last-modified: Fri, 31 Mar 2023 12:07:15 GMT
etag: "123-5f8310cc9b717-gzip"
vary: Accept-Encoding
content-encoding: gzip
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/us-assets/osthav.com.css?ver=c39cede4

94.127.186.59

200 OK

68 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/us-assets/osthav.com.css?ver=c39cede4
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
68 kB (67822 bytes)
Hash
2c1cb6ebfbc62da8938ed5b0c87c9854
9f50f7af4982cd9d445884312d243c42c7c42df0
08af5bedc5c2700336dee4c927353db63ac076748445f5996df3f3bcda7028aa

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/uploads/us-assets/osthav.com.css?ver=c39cede4 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
last-modified: Tue, 10 Jan 2023 09:31:24 GMT
etag: W/"63bd306c-50bc6"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=7.0.3

94.127.186.59

200 OK

24 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=7.0.3
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
Unicode text, UTF-8 text, with very long lines (32561)
Size
24 kB (24100 bytes)
Hash
24c7fc928cd9985f533308d0808641c5
b56dcdb8e7968d6595df4553b701a3baa74c7988
8b6a7419f68f818eb9d23c6bc885cd413e3ad8a9fc1b661a64465d97dd2c2c18

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=7.0.3 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2023 10:11:21 GMT
etag: W/"64280349-7f34"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.2

94.127.186.59

200 OK

188 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.2
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (5334), with no line terminators
Size
188 kB (187924 bytes)
Hash
98180c25771a1379b35e839096244964
17e0a18d6e2a06f8d798601ba828d83edea4531c
e01cca4ce4c2139f0567418bc10f8f71ab222ca240c799746db53a690b4dcb71

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=6.2 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
last-modified: Fri, 31 Mar 2023 13:23:17 GMT
etag: W/"6426dec5-14d6"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/us-assets/osthav.com.js?ver=c3df62e9

94.127.186.59

200 OK

171 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/us-assets/osthav.com.js?ver=c3df62e9
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (5819)
Size
171 kB (170857 bytes)
Hash
89a7f028350aca7c3affd18113541105
58951d358f79646829c1ce4f381f186034ede3e0
c8685affed3eec46b1e30e515ab098e0c40a9c9d9abe066ca10cb0a94c74040a

HTTP Headers

GET /wp-content/uploads/us-assets/osthav.com.js?ver=c3df62e9 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 09:31:24 GMT
etag: W/"63bd306c-23ee7"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load-native.min.js?ver=3.12.6

94.127.186.59

200 OK

81 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load-native.min.js?ver=3.12.6
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (9422)
Size
81 kB (80731 bytes)
Hash
0447497ae5a754a3e439a0b9a5096797
5810895f5b3719d0e30ad5be267a4849c223edea
39807ce41d39b2032b3cadd8a8d588f37ce8948d0e2a836d25867ce35efc4729

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load-native.min.js?ver=3.12.6 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Thu, 16 Mar 2023 20:54:30 GMT
etag: W/"64138206-2505"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/themes/Impreza/fonts/fa-regular-400.woff2?ver=8.15.1

94.127.186.59

200 OK

169 kB

URL GET HTTP/2
osthav.com/wp-content/themes/Impreza/fonts/fa-regular-400.woff2?ver=8.15.1
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 168824, version 331.-31196\012- data
Size
169 kB (168824 bytes)
Hash
a3d7d331957546ae10ad69bb44b83a04
d1a227a182628c48649912e8bcd9251113e9c783
3bbb0df89b8dbe8001e8c24de4e2d1693f94997b29f007a7bda22a9802832768

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/themes/Impreza/fonts/fa-regular-400.woff2?ver=8.15.1 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: font/woff2
content-length: 168824
last-modified: Mon, 03 Apr 2023 15:36:47 GMT
etag: "642af28f-29378"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/2020/07/osthav1.png

94.127.186.59

200 OK

898 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/2020/07/osthav1.png
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
PNG image data, 2560 x 1265, 8-bit/color RGBA, non-interlaced\012- data
Size
898 kB (898364 bytes)
Hash
e967fc0ba6fe8f3160fd898c4871c3f5
5a36dcb44318af2be2a1c90344c8a5a06a0164d0
7f8ab99e5e927bb9fd5d938515a9c7d15150c63ccede2f59f38be0ea251b9760

HTTP Headers

GET /wp-content/uploads/2020/07/osthav1.png HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: image/png
content-length: 898364
last-modified: Tue, 10 Jan 2023 09:31:08 GMT
etag: "63bd305c-db53c"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/2020/07/Playa-de-Galizano-6.jpg

94.127.186.59

200 OK

132 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/2020/07/Playa-de-Galizano-6.jpg
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x587, components 3\012- data
Size
132 kB (132409 bytes)
Hash
d937c2369ad20cb4143dfb82a5cafc7a
60ae37212a9257d621a91ff858400b895553d000
1616d785292ef74b8bd8adacda9dac3341616fd2ae5a212f4299c3b181e0389f

HTTP Headers

GET /wp-content/uploads/2020/07/Playa-de-Galizano-6.jpg HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: image/jpeg
content-length: 132409
last-modified: Tue, 10 Jan 2023 09:31:04 GMT
etag: "63bd3058-20539"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/2020/07/cropped-osthav1-300x300.png

94.127.186.59

200 OK

60 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/2020/07/cropped-osthav1-300x300.png
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size
60 kB (60131 bytes)
Hash
7d3f1e283d4b567d8d19c3deb74e7921
cb937695711156c57025d80b567ebd30bc322c15
b75a3ab7a7b58fa132cefe3bb243e34ef8e647f4cc305604b671c7a4c5ca7773

HTTP Headers

GET /wp-content/uploads/2020/07/cropped-osthav1-300x300.png HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: image/png
content-length: 60131
last-modified: Tue, 10 Jan 2023 09:31:04 GMT
etag: "63bd3058-eae3"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/2020/07/cropped-osthav1-150x150.png

94.127.186.59

200 OK

17 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/2020/07/cropped-osthav1-150x150.png
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (17317 bytes)
Hash
1840652e433f8937c9626d61b474ac8d
bcd04c814953c7a674e0f5d74732373091839ea5
4ae205ac7fd098197cce2d9775c45d0bf2e5175f6fb5f4d806a7b773a78617d4

HTTP Headers

GET /wp-content/uploads/2020/07/cropped-osthav1-150x150.png HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: image/png
content-length: 17317
last-modified: Tue, 10 Jan 2023 09:31:04 GMT
etag: "63bd3058-43a5"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1

94.127.186.59

200 OK

10 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (10241), with no line terminators
Size
10 kB (10241 bytes)
Hash
7be65ac27024c7b5686f9d7c49690799
241ada4a86443adc5623d1a3a8018a96d9de6d5a
52db930f81d97113dde679cac624cb5435b56d4ac486e91a0b6692d2cb615a84

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Fri, 31 Mar 2023 13:23:06 GMT
etag: W/"6426deba-2801"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1

94.127.186.59

200 OK

13 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
HTML document, ASCII text, with very long lines (12943), with no line terminators
Size
13 kB (12943 bytes)
Hash
5bc2b1fa970f9cecb3c30c0c92c98271
7c6bb87aaa24714b7b3b3c86dd932736a80270a9
1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e

HTTP Headers

GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Fri, 31 Mar 2023 13:23:06 GMT
etag: W/"6426deba-328f"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v24/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2

216.58.207.227

200 OK

13 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v24/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://osthav.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT

File type
Web Open Font Format (Version 2), TrueType, length 12804, version 1.0\012- data
Size
13 kB (12804 bytes)
Hash
eb7d03ac4d0688b70a1b20d09ddac526
3664d3efad896b6280b3737d21d3b63ce65a80a8
1efb6b34aee777f657af03fc18ab7ec444bcb7025b175edbd489c3c984035f34

HTTP Headers

GET /s/montserrat/v24/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://osthav.com
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12804
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Apr 2023 11:34:35 GMT
expires: Thu, 04 Apr 2024 11:34:35 GMT
cache-control: public, max-age=31536000
age: 575673
last-modified: Tue, 26 Apr 2022 14:39:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

osthav.com/wp-content/themes/Impreza/fonts/fa-brands-400.woff2?ver=8.15.1

94.127.186.59

200 OK

77 kB

URL GET HTTP/2
osthav.com/wp-content/themes/Impreza/fonts/fa-brands-400.woff2?ver=8.15.1
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 76728, version 331.-31196\012- data
Size
77 kB (76728 bytes)
Hash
f4120760fb40152d1bdb109103063c13
5947214a429024e9dd14bb5c3a1bf007f35ea81d
39c658ef377f9ec31442c5343a15bdfc4c4653bcca74bc7d6fe4b3e736a60aa4

HTTP Headers

GET /wp-content/themes/Impreza/fonts/fa-brands-400.woff2?ver=8.15.1 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: font/woff2
content-length: 76728
last-modified: Mon, 03 Apr 2023 15:36:47 GMT
etag: "642af28f-12bb8"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-includes/css/dist/block-library/style.min.css?ver=6.2

94.127.186.59

200 OK

98 kB

URL GET HTTP/2
osthav.com/wp-includes/css/dist/block-library/style.min.css?ver=6.2
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type

Size
98 kB (97517 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
last-modified: Fri, 31 Mar 2023 12:07:15 GMT
etag: W/"6426ccf3-17ced"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/2020/07/osthavblancofondo-2.png

94.127.186.59

200 OK

187 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/2020/07/osthavblancofondo-2.png
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
187 kB (186957 bytes)
Hash
de9adbdd282bb5b574a90868e1ffe016
b9a1e992aaf35c76e863770217a3c19f39728eb8
a525ca7104fdbc7b07752688c0533eca89a00439e15cf150c1b5fe920103d413

HTTP Headers

GET /wp-content/uploads/2020/07/osthavblancofondo-2.png HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/wp-content/uploads/us-assets/osthav.com.css?ver=c39cede4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: image/png
content-length: 186957
last-modified: Tue, 10 Jan 2023 09:31:04 GMT
etag: "63bd3058-2da4d"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v24/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2

216.58.207.227

200 OK

13 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v24/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://osthav.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT

File type
Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Size
13 kB (12708 bytes)
Hash
c2a023838175cc9990e4f9a8e3ef341b
61d8759dbe3e921dee73c41d8b0646a0b06ebdbb
59d09721ef5d6a8a6aa8cf8100a1eaa2ef1644bd196fc1a788ad31e16a505734

HTTP Headers

GET /s/montserrat/v24/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://osthav.com
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 11 Apr 2023 10:58:00 GMT
expires: Wed, 10 Apr 2024 10:58:00 GMT
cache-control: public, max-age=31536000
age: 59468
last-modified: Tue, 26 Apr 2022 14:37:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

osthav.com/wp-content/themes/Impreza/fonts/fa-solid-900.woff2?ver=8.15.1

94.127.186.59

200 OK

137 kB

URL GET HTTP/2
osthav.com/wp-content/themes/Impreza/fonts/fa-solid-900.woff2?ver=8.15.1
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196\012- data
Size
137 kB (137104 bytes)
Hash
dbf1fc91f1beec2915123257ea4d58ef
d2a6d5d31334f6d0831f1c17d26e23fe0aa6a8db
8d4d29042c23b5fcbed3af690421776de0f8ad3d308d66e24a9d80bcc8ccb522

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/themes/Impreza/fonts/fa-solid-900.woff2?ver=8.15.1 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: font/woff2
content-length: 137104
last-modified: Mon, 03 Apr 2023 15:36:47 GMT
etag: "642af28f-21790"
x-cache-status: BYPASS
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

osthav.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.2

94.127.186.59

200 OK

28 kB

URL GET HTTP/2
osthav.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.2
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (27639), with no line terminators
Size
28 kB (27639 bytes)
Hash
36ea4805809e6b690c2f5126a0808297
4531470deab3efd0b8499f29a323a1b45f0efced
4354449ab7a164ef5486d12020f3bc403b8ff104a8da73e9f9332106b86b061c

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.2 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
last-modified: Tue, 10 Jan 2023 09:31:28 GMT
etag: W/"63bd3070-6bf7"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8

94.127.186.59

200 OK

8.7 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
C source, ASCII text, with very long lines (8954), with no line terminators
Size
8.7 kB (8700 bytes)
Hash
74874d1afc5c0e12ea3235df96463f8f
6b7c29726006e2a417184d4cb174248e2854975d
00a15105f9b7b5e2c0a5fbb8d5af42c3af09459a6855946bfd6b89145054d03c

HTTP Headers

GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Fri, 31 Mar 2023 13:23:17 GMT
etag: W/"6426dec5-21fc"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.3

94.127.186.59

200 OK

90 kB

URL GET HTTP/2
osthav.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.3
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (65447)
Size
90 kB (89815 bytes)
Hash
0e850a69bc7fd0acc2e92ce6eee87959
8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c
afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.3 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Fri, 31 Mar 2023 12:07:15 GMT
etag: W/"6426ccf3-15ed7"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c

94.127.186.59

200 OK

6.9 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (7211), with no line terminators
Size
6.9 kB (6875 bytes)
Hash
2e8646b1e6e0ad532054bd2cb41c48c8
2d4d17cdb49996a58cebd0994e894aa29f1397c1
b345b58874167a96cd649dcf2eaf4b52ca798616f7eafd39972f964fd0c06e85

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: application/javascript
last-modified: Sat, 01 Apr 2023 10:11:21 GMT
etag: W/"64280349-1adb"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

osthav.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1

94.127.186.59

200 OK

2.9 kB

URL GET HTTP/2
osthav.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1
IP
94.127.186.59:443
ASN
#50926 Axarnet Comunicaciones, S.l.

Requested by
https://osthav.com/
Certificate
IssuerLet's Encrypt
Subjectosthav.com
FingerprintDE:DC:6B:73:B7:8B:A4:46:DF:54:4D:B5:97:61:93:80:29:BE:86:45
ValiditySat, 18 Mar 2023 11:38:09 GMT - Fri, 16 Jun 2023 11:38:08 GMT

File type
ASCII text, with very long lines (3132), with no line terminators
Size
2.9 kB (2859 bytes)
Hash
89bd5a8b1bdc64bec1c032bfa9d4d1bf
61a78be5d9c8917a59c60f2c2714c328158a9a33
7e87082ce1b8d6a88ac2fa4c12013b59a0b723db9b5c1c91fe1c175e2875fc2b

HTTP Headers

GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1 HTTP/1.1
Host: osthav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osthav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 12 Apr 2023 03:29:08 GMT
content-type: text/css
last-modified: Fri, 31 Mar 2023 13:23:06 GMT
etag: W/"6426deba-b2b"
x-cache-status: BYPASS
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML