| www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= |  162.214.92.166 | 200 OK | 10 kB |
URL User Request GET HTTP/1.1www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (775), with CRLF line terminators Hashf0a05f21155ccac06abe11cf3c1e8b88 8e8117fa67752f117912723203651dc18d765c5d 3faf175760ad1a846cfcf65a16d3290ba902c7caf9f59e43355f113eea41c6c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:04 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.pinturasycolores.com/home/config/assets/pwrs-bundle.css | 162.214.92.166 | 200 OK | 86 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/pwrs-bundle.css IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeASCII text, with CRLF line terminators Hash822f10f36b29dc1db1e0b5957fee405d e42f370c91f66af49bc701f28e936686bd433d6e dab5b69f66a9ea681cc9743473f62fc3dd5add424adf5d8bfb13af6e41bfb4c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/pwrs-bundle.css HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 85533
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.pinturasycolores.com/home/config/assets/rbc-icons.css | 162.214.92.166 | 200 OK | 3.6 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/rbc-icons.css IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
Hash84ead8beefefb5761cdf8e6f7bde4f37 73af3e2c36d15d237574f95d335a4b969c365024 e0e6932375c29bda3f3744a58670330d3365c07c272bc7bd35e3e65ba4d728c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/rbc-icons.css HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 3593
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.pinturasycolores.com/home/config/assets%20%20%3Cbody%20data-new-gr-c-s-check-loaded= | 162.214.92.166 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets%20%20%3Cbody%20data-new-gr-c-s-check-loaded= IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets%20%20%3Cbody%20data-new-gr-c-s-check-loaded= HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| www.pinturasycolores.com/home/config/assets/email.css | 162.214.92.166 | 200 OK | 19 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/email.css IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeUnicode text, UTF-8 text, with very long lines (632), with CRLF line terminators Hash0c601c0e279ea5e8c7bad027eb1180aa 7aed9a2abf470df53c3535d5bfbf54cbf6b48716 e02a33051be2e3d022eb9b299dd36098b60a568447a623220b1f5877cd0b740e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/email.css HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 18770
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.pinturasycolores.com/home/config/assets/master.css | 162.214.92.166 | 200 OK | 22 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/master.css IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeASCII text, with very long lines (376), with CRLF line terminators Hashf92c3fd3cb4fe5a613df46ca2d513b73 82f89e2b726903ddd5df73b9b73f9ba12c7d69cf c9654118a2efbcc8274a122d6318639dae5814a40338fb0922112b08326f2914
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/master.css HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 22443
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.pinturasycolores.com/uos/common/fonts/Roboto-Regular.ttf | 162.214.92.166 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.pinturasycolores.com/uos/common/fonts/Roboto-Regular.ttf IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uos/common/fonts/Roboto-Regular.ttf HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/assets/pwrs-bundle.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| www.pinturasycolores.com/home/config/assets/jquery-3.6.0.min.js | 162.214.92.166 | 200 OK | 90 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/jquery-3.6.0.min.js IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/jquery-3.6.0.min.js HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 89501
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.pinturasycolores.com/home/config/assets/rbc_royalbank_en-new.gif | 162.214.92.166 | 200 OK | 28 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/rbc_royalbank_en-new.gif IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typePNG image data, 537 x 177, 8-bit/color RGBA, non-interlaced Hash3a793ad0924da8772913766940a2dcaa ad2a63f8a9762b01c2cce3d51a52bd884c9d7182 982fd8fe5426541db5db3b6f3bb4d958a04e2be728ef48b919f0c2dfcb7e765d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/rbc_royalbank_en-new.gif HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:05 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 28259
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
|
|
| www.pinturasycolores.com/home/config/assets%20%20%3Cbody%20data-new-gr-c-s-check-loaded= | 162.214.92.166 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets%20%20%3Cbody%20data-new-gr-c-s-check-loaded= IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets%20%20%3Cbody%20data-new-gr-c-s-check-loaded= HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 21:11:06 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| www.pinturasycolores.com/uos/common/fonts/FiraSans-Regular.otf | 162.214.92.166 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.pinturasycolores.com/uos/common/fonts/FiraSans-Regular.otf IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uos/common/fonts/FiraSans-Regular.otf HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/assets/pwrs-bundle.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 21:11:06 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| www.pinturasycolores.com/home/config/assets/rbc-icons.ttf?9w1q4o | 162.214.92.166 | 200 OK | 8.1 kB |
URL GET HTTP/1.1www.pinturasycolores.com/home/config/assets/rbc-icons.ttf?9w1q4o IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, rbc-icons Hash9293702a3142a80ac8ca6128dfdf4f04 05c9934e8a71006c30a85f6fce25aa3dda40d2f8 bd9f2a9bacc79d0c23c957e53f8ccb9d344f05be3bdcab7494e748aab37b42e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/config/assets/rbc-icons.ttf?9w1q4o HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/assets/rbc-icons.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 21:11:06 GMT
Server: Apache
Last-Modified: Wed, 08 May 2024 14:52:39 GMT
Accept-Ranges: bytes
Content-Length: 8100
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/ttf
|
|
| www.pinturasycolores.com/uos/common/fonts/Roboto-Medium.ttf | 162.214.92.166 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.pinturasycolores.com/uos/common/fonts/Roboto-Medium.ttf IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uos/common/fonts/Roboto-Medium.ttf HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/assets/pwrs-bundle.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 21:11:06 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| www.pinturasycolores.com/favicon.ico | 162.214.92.166 | 404 Not Found | 315 B |
URL GET HTTP/1.1www.pinturasycolores.com/favicon.ico IP162.214.92.166:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y= CertificateIssuerLet's Encrypt Subjectpinturasycolores.com Fingerprint1D:F9:A6:7F:72:54:C8:44:7E:5C:10:7A:0B:C8:68:7B:36:D3:61:C6 ValidityTue, 09 Apr 2024 13:59:36 GMT - Mon, 08 Jul 2024 13:59:35 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.pinturasycolores.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pinturasycolores.com/home/config/billing.php?WrtDc3CMD72uCDL4KuLHclkeWohG5F2sezBvo0MHYyQ7RvHnLBR7Yi7tICwDbrgWALGVtFuX3Q9xFwualzUQG8ixauRg9XESyr2GOWQb122oCguJph8TWoeYlbWgaX2Ysjp1xqr5umS5pFzI2pzV6Y=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 21:11:06 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|