andreuboet.com/
301 Moved Permanently 230 B IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 73b122e0939193c638efb6aab0c04205
34b419c2c863e9efe394ea5172946de2f022ba7b
1b30e252b047f458340fbdc9de217e372a2342285ac3f2af2c156dc28f8a18e2
GET / HTTP/1.1
Host: andreuboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 20:46:01 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 230
Connection: keep-alive
Location: http://centriboet.com/
X-Powered-By: PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f416977a8d6dfaafb2dbfd0e68b871f8
dfa97bd829b03162de91c80133f2fde69b58a8d2
2c4d0fd1b7a6d398026a4817267adce203429acdd3defa44a879f0d945f392d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C4D0FD1B7A6D398026A4817267ADCE203429ACDD3DEFA44A879F0D945F392D5"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16991
Expires: Mon, 23 Jan 2023 01:29:12 GMT
Date: Sun, 22 Jan 2023 20:46:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4714c95a0c854e38f9be444f9343bf14
07ce5eb635448f2b3bafbe51e4dfeef47cdf4f7b
4d47e08c9afb704096e93a51f6e95c0dc7c7bc31e67ded39998ff37ed56e0965
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D47E08C9AFB704096E93A51F6E95C0DC7C7BC31E67DED39998FF37ED56E0965"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4665
Expires: Sun, 22 Jan 2023 22:03:46 GMT
Date: Sun, 22 Jan 2023 20:46:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 22 Jan 2023 20:42:33 GMT
content-type: application/json
age: 208
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17094b856fde02b2c8c2d3845ad325cf
26dc3f2ebf81faf5ab96eb75ffcbead6085528b8
6547376c41dcaa352cc4e747291916902bcddc0032b750bd84c5e3b2fe6f7d16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6547376C41DCAA352CC4E747291916902BCDDC0032B750BD84C5E3B2FE6F7D16"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6130
Expires: Sun, 22 Jan 2023 22:28:11 GMT
Date: Sun, 22 Jan 2023 20:46:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KRVfeAmYnZ0JPM0sV7wFUZ1kLdbygh8nZ4yLgbmi/YfAKCDigeTCqAukrmW7U+BBbBuuVlvKLsY=
x-amz-request-id: NKKYENNMMRYHYCCX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 22 Jan 2023 19:47:25 GMT
age: 3516
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
centriboet.com/
301 Moved Permanently 162 B IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 20:46:01 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://centriboet.com/
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:01 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec0d0674dd21d131bddf25ddc44d3a75
aa4040fa902b90e216cb73f25e3c9a7a724c8ceb
070a0d7f846f64867a30fa1edf80017c7694cf80a20bae2f2c2c73c0f15db869
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "070A0D7F846F64867A30FA1EDF80017C7694CF80A20BAE2F2C2C73C0F15DB869"
Last-Modified: Sun, 22 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21558
Expires: Mon, 23 Jan 2023 02:45:20 GMT
Date: Sun, 22 Jan 2023 20:46:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 22 Jan 2023 20:17:30 GMT
age: 1712
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c74880fa99032b5c3831c179d702419
0020b368309735c94d8053d3781a7efb7283cfc5
437e2d4e2bbfb33b0ff696172378ce55a0a5ed005a1b8c4005eab4a6995a3042
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4868
Cache-Control: max-age=135713
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Etag: "63ccfca7-1d7"
Expires: Tue, 24 Jan 2023 10:27:55 GMT
Last-Modified: Sun, 22 Jan 2023 09:06:47 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 280 B IP
Hash a25567cb3f63e13ec07e671356f7ad5b
f7bc53deb15fdeca18806318bf7d3267b1766c7f
09cbab3f29c812e2bc1c54b9a6600899fdc64ce0479bcb314a92553069a95f9d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6464
Cache-Control: max-age=114645
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Etag: "63cca420-118"
Expires: Tue, 24 Jan 2023 04:36:47 GMT
Last-Modified: Sun, 22 Jan 2023 02:49:04 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 41d9a97f3e66fa295337149c04ad0bae
5d0ffce8986ba0d9e47cd508b79c1feab18076cf
fa5f51ac868aed9106d71f0d5ae7d2fba4afed36bc9fdb94a5a66cea3ac15550
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
centriboet.com/wp-content/themes/theme53993/bootstrap/css/responsive.css
200 OK 4.2 kB URL HTTP/2 centriboet.com/wp-content/themes/theme53993/bootstrap/css/responsive.css
IP
ASN #6739 Vodafone Ono, S.A.
Hash 1b6402d24964648f36ca29e759a4f358
6118b2f50e42462211a930e5d9368b948e392727
7b8eea588180d7840f38b14135d40ab41f9d327ab0aa4af3fccecc21b4bae647
GET /wp-content/themes/theme53993/bootstrap/css/responsive.css HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-55b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 41d9a97f3e66fa295337149c04ad0bae
5d0ffce8986ba0d9e47cd508b79c1feab18076cf
fa5f51ac868aed9106d71f0d5ae7d2fba4afed36bc9fdb94a5a66cea3ac15550
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 41d9a97f3e66fa295337149c04ad0bae
5d0ffce8986ba0d9e47cd508b79c1feab18076cf
fa5f51ac868aed9106d71f0d5ae7d2fba4afed36bc9fdb94a5a66cea3ac15550
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css?ver=ebc0e58e277ef15de4ef982df04d5a83
200 OK 8.1 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css?ver=ebc0e58e277ef15de4ef982df04d5a83
IP
File type ASCII text, with very long lines (2363)
Hash 1930141d1ccd3409ebbe8c2db4c43fcf
8d6b59aa365bf686ab7408353fd232d7ca7feab5
f2094ee57e84b8403b58f45dbe68411e3b02fe3f0cb465fdec48b206ab66d48f
GET /ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css?ver=ebc0e58e277ef15de4ef982df04d5a83 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css; charset=UTF-8
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8060
date: Sun, 22 Jan 2023 20:46:02 GMT
expires: Mon, 22 Jan 2024 20:46:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash a25567cb3f63e13ec07e671356f7ad5b
f7bc53deb15fdeca18806318bf7d3267b1766c7f
09cbab3f29c812e2bc1c54b9a6600899fdc64ce0479bcb314a92553069a95f9d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6464
Cache-Control: max-age=114645
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Etag: "63cca420-118"
Expires: Tue, 24 Jan 2023 04:36:47 GMT
Last-Modified: Sun, 22 Jan 2023 02:49:04 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EuUGrDAyoKfhHRwV7eI+LQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HMSJA5/v6EZ98fKdY67WTy5yoec=
centriboet.com/wp-content/plugins/qtranslate-x/flags/fr.png
301 Moved Permanently 162 B URL HTTP/1.1 centriboet.com/wp-content/plugins/qtranslate-x/flags/fr.png
IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/plugins/qtranslate-x/flags/fr.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 20:46:02 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://centriboet.com/wp-content/plugins/qtranslate-x/flags/fr.png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 41d9a97f3e66fa295337149c04ad0bae
5d0ffce8986ba0d9e47cd508b79c1feab18076cf
fa5f51ac868aed9106d71f0d5ae7d2fba4afed36bc9fdb94a5a66cea3ac15550
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
centriboet.com/wp-content/plugins/qtranslate-x/flags/catala.png
301 Moved Permanently 162 B URL HTTP/1.1 centriboet.com/wp-content/plugins/qtranslate-x/flags/catala.png
IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/plugins/qtranslate-x/flags/catala.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 20:46:02 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://centriboet.com/wp-content/plugins/qtranslate-x/flags/catala.png
centriboet.com/wp-content/uploads/2017/07/Reparacio.jpg
200 OK 15 kB URL HTTP/2 centriboet.com/wp-content/uploads/2017/07/Reparacio.jpg
IP
ASN #6739 Vodafone Ono, S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x203, components 3\012- data
Hash 1745d75a2cfcb3baa985a6ccc3755f64
28cfe8f0ba589c5a30f27f3c30fc84f2116e3d37
ad783cf89986a18041de07567b31943a809a59086ccabe3a3d3a438dff2a546f
GET /wp-content/uploads/2017/07/Reparacio.jpg HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/jpeg
content-length: 15276
last-modified: Wed, 06 Apr 2022 11:37:49 GMT
etag: "624d7b8d-3bac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/uploads/2017/02/banner-3.jpg
200 OK 16 kB URL HTTP/2 centriboet.com/wp-content/uploads/2017/02/banner-3.jpg
IP
ASN #6739 Vodafone Ono, S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x202, components 3\012- data
Hash a538c3e5ca4a0ab5860c684bc6a40256
82d83d7e9dfe359116a29431b28f11913847cba4
e6d6fe0f30809a838a9e1fab3c933faaac2e18534a40bc980052ffd148b56a0a
GET /wp-content/uploads/2017/02/banner-3.jpg HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/jpeg
content-length: 15910
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "624d7b8c-3e26"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/uploads/2017/02/Logo-Centriboet-blanco.png
200 OK 5.1 kB URL HTTP/2 centriboet.com/wp-content/uploads/2017/02/Logo-Centriboet-blanco.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 600 x 72, 8-bit colormap, non-interlaced\012- data
Hash 067e5b2dd59688b6c529f89471aeaaf2
61ebbd14cb4f6f38594d6f6424b4fac92ee38651
afe13a1ff685512c6cadd758bdf04eff08baf80ec041065ce7ca6e168b5be2a7
GET /wp-content/uploads/2017/02/Logo-Centriboet-blanco.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/png
content-length: 5119
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "624d7b8c-13ff"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/uploads/2017/02/banner-4.jpg
200 OK 16 kB URL HTTP/2 centriboet.com/wp-content/uploads/2017/02/banner-4.jpg
IP
ASN #6739 Vodafone Ono, S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x203, components 3\012- data
Hash 44a2cda6be3c79b2cdb7c4599d6f99f9
3309443908a66458e1dd793f118994b856bc09d4
aa24b9120fe2e9bbe080b3e879f96ca042ab3fa194d155afca692f5033fd7c5f
GET /wp-content/uploads/2017/02/banner-4.jpg HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/jpeg
content-length: 16394
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "624d7b8c-400a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/uploads/2017/02/banner-1.jpg
200 OK 18 kB URL HTTP/2 centriboet.com/wp-content/uploads/2017/02/banner-1.jpg
IP
ASN #6739 Vodafone Ono, S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x202, components 3\012- data
Hash 9b2c96c62d91b4701b37cffbc45a2ecb
91e43e247afdbe1533326cf2866e5f81c40c3006
a12d8b60247d824395d67d48020cedb3a945719d3e5f9d91d23f31959b3fe3dc
GET /wp-content/uploads/2017/02/banner-1.jpg HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/jpeg
content-length: 17832
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "624d7b8c-45a8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/qtranslate-x/flags/es.png
301 Moved Permanently 162 B URL HTTP/1.1 centriboet.com/wp-content/plugins/qtranslate-x/flags/es.png
IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/plugins/qtranslate-x/flags/es.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 20:46:02 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://centriboet.com/wp-content/plugins/qtranslate-x/flags/es.png
centriboet.com/wp-content/plugins/qtranslate-x/flags/gb.png
301 Moved Permanently 162 B URL HTTP/1.1 centriboet.com/wp-content/plugins/qtranslate-x/flags/gb.png
IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/plugins/qtranslate-x/flags/gb.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 20:46:02 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://centriboet.com/wp-content/plugins/qtranslate-x/flags/gb.png
centriboet.com/wp-content/plugins/qtranslate-x/flags/fr.png
200 OK 149 B URL HTTP/2 centriboet.com/wp-content/plugins/qtranslate-x/flags/fr.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash f2558d8e2c16ce0211285a8595854cd5
c117d52e19ccb715bd458bbf11f9077cf5bf77e2
7600b0f12c27ee38d18e5e84961e8c8677983ae1dab78d7f941798b0ad7b62e5
GET /wp-content/plugins/qtranslate-x/flags/fr.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/png
content-length: 149
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "95-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/qtranslate-x/flags/catala.png
200 OK 163 B URL HTTP/2 centriboet.com/wp-content/plugins/qtranslate-x/flags/catala.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 18 x 12, 8-bit colormap, non-interlaced\012- data
Hash e466c93c7667e7a819b78b0435981687
ba4a2c1b7d7ae59ab3c34ab7dcf479f530251578
81079285661a3f16328cfedb051785f8977214fb0c85e43d6d59f5fdf21a8312
GET /wp-content/plugins/qtranslate-x/flags/catala.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/png
content-length: 163
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "a3-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/wp-emoji-release.min.js?ver=ebc0e58e277ef15de4ef982df04d5a83
200 OK 4.8 kB URL HTTP/2 centriboet.com/wp-includes/js/wp-emoji-release.min.js?ver=ebc0e58e277ef15de4ef982df04d5a83
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (15660)
Hash 6f34831c53cdcdb9265287b0c62961f9
6526b4957a132612151103b6f480d6fc5dcab3c2
0c138fea43f12e0832a98c262c7e8f0e63eb825b16fadfb362aff3f77809ee92
GET /wp-includes/js/wp-emoji-release.min.js?ver=ebc0e58e277ef15de4ef982df04d5a83 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:19:29 GMT
vary: Accept-Encoding
etag: W/"628dd881-48b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/qtranslate-x/flags/gb.png
200 OK 398 B URL HTTP/2 centriboet.com/wp-content/plugins/qtranslate-x/flags/gb.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash c37d7808c8c177a0074f40217bc3bb02
19d5ebaaca76dcfdeb4566466fadafdb75579bba
78cba0d68a87a8db2d5fd6b38d222ab74c4af7a11fe8c716dee390ec0582aecd
GET /wp-content/plugins/qtranslate-x/flags/gb.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: image/png
content-length: 398
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "18e-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?v=3&key=AIzaSyAwG11f8oieDH612KVZe0DAChrGgizYRW4
200 OK 53 kB URL HTTP/2 maps.googleapis.com/maps/api/js?v=3&key=AIzaSyAwG11f8oieDH612KVZe0DAChrGgizYRW4
IP
File type ASCII text, with very long lines (2459)
Hash 71e71110c5303312e39b76359034d827
c9478dc0941f0aa35c4337f171f21c67ee53a723
31173cb8883b1ada396cfe17c87ae4f3da80e49091a26c2c622d6973253505f2
GET /maps/api/js?v=3&key=AIzaSyAwG11f8oieDH612KVZe0DAChrGgizYRW4 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Sun, 22 Jan 2023 20:46:02 GMT
expires: Sun, 22 Jan 2023 21:16:02 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53387
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/images/dashed1.png
200 OK 79 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/images/dashed1.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 11 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash cc780557aa970af252e4643b16b908a8
70519ce1c8fe1c70de649803afd9c499c89d8081
acd0e78fdc623f7f8bf7605cc9ab6963c5dc015f877a3e0c2ed455cd5c8692c9
GET /wp-content/themes/theme53993/images/dashed1.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/theme53993/main-style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/png
content-length: 79
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "4f-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
centriboet.com/en/wp-content/themes/CherryFramework/bootstrap/less/mixins.less
404 Not Found 8.8 kB URL HTTP/2 centriboet.com/en/wp-content/themes/CherryFramework/bootstrap/less/mixins.less
IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Hash 4da66cf624e43b556e2db87f86ce5345
d04142823dc8d885f10e0faae9303a98ba717672
98117639e44e9ae515013ccea2acd7d6ae703dc603b820f64f5ddaaf8b1e7024
Analyzer Verdict Alert fortinet Malware
GET /en/wp-content/themes/CherryFramework/bootstrap/less/mixins.less HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://centriboet.com/wp-content/themes/CherryFramework/css/style.css
Connection: keep-alive
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://centriboet.com/en/wp-json/>; rel="https://api.w.org/"
set-cookie: qtrans_front_language=en; expires=Mon, 22-Jan-2024 20:46:03 GMT; Max-Age=31536000; path=/
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/images/bgherounit.png
200 OK 445 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/images/bgherounit.png
IP
ASN #6739 Vodafone Ono, S.A.
File type gzip compressed data, max compression\012- data
Hash 806c5b13a43e76108986bd0cb964756a
a4128873fa9a68b34e8142e474d980a331f6d075
9a2b3ff5d84fc3098ad98d844a053aa6b6f7ac25d231790c2ef13a5d997a1d15
GET /wp-content/themes/theme53993/images/bgherounit.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/theme53993/main-style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/png
content-length: 95
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "5f-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/images/patternwhite1.png
200 OK 564 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/images/patternwhite1.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ea9be591f3319fd4fc5eaec5c042909
379012baa6126fe676d88515c5eeba536880a052
fd60e0e7c0fd502448dda4fcfef6d66ef24678f6bb2667027abfa6536f7b5702
GET /wp-content/themes/theme53993/images/patternwhite1.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/theme53993/main-style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/png
content-length: 564
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "234-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/images/dashedbanners.png
200 OK 101 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/images/dashedbanners.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 22 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 761168881e7aabe1d924ad5d604678e4
2181b9a4f6a853edee52fee5cfcfd79c5166545e
94584624d249e6b2dc92bf1219f69c9b372d0ee94ee3ed16ed99f5c38ec2123b
GET /wp-content/themes/theme53993/images/dashedbanners.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/theme53993/main-style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/png
content-length: 101
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "65-5dbfaca6cfb00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.woff?v=3.2.1
200 OK 44 kB URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.woff?v=3.2.1
IP
File type Web Open Font Format, TrueType, length 43572, version 1.0\012- data
Hash b683029bafe0305ac2234038a03e1541
12f8c193902e99348493ace32e498031bf79b654
18e6b5ff511b90edf098e62ac45ed9d6673a3eee10165d0de4164d4d02a3a77f
GET /font-awesome/3.2.1/font/fontawesome-webfont.woff?v=3.2.1 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://centriboet.com
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: font/woff
content-length: 43572
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "b683029bafe0305ac2234038a03e1541"
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 08/20/2022 02:34:02
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1185ebd56ee53e32c3535c148d4e9be0
cdn-cache: HIT
cf-cache-status: HIT
age: 50396
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78db230789a11c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.2
200 OK 6.8 kB URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (15446)
Hash 32ca439ce939f4070617c567b223a852
4ecf1b904a8e7e7e7f84c53d2937b36652469106
8b1ca1e7f7b83ab84d43c7f467c8cb93f299dc3deb40e4cb846e6eaddab90220
GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-43ba"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2
200 OK 4.2 kB URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (11760)
Hash c53d22eb18f19523b85dfced817efc84
6e7560e19b7b16447c941e4763dd96ed3a450e9f
bd3b49fc24a801edb43e841fa2cc0102d5951627d4e1f6a709bd92930613301b
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-2ea1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
200 OK 6.6 kB URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (17219), with no line terminators
Hash 1f4773baffa829e2f9c22f7582997534
42420aa22962b9429178be597502f645ba9eafee
a04730f0cce7451c83176963a812e359bad3b626ae112359272b4dd1f23e41ce
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-4343"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dec1960c15b7b32835eece7cb397c51f
ddaf303a58c2f336530c55a9ca29d5731e5f7da6
f2d6ba10803cb182fe6bac4e417ce57f3d712c836ed1d8950829bd29cbb35f48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://centriboet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 18:52:41 GMT
expires: Tue, 16 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 525202
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/style.css
200 OK 15 kB URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/style.css
IP
ASN #6739 Vodafone Ono, S.A.
Hash 6da6436e1fef99ece95f8ee31cafd2d7
e6574a753ed911b8110bc53257a11fc0f9151a34
5bfebdab9e0971c48593e89f5d1650b8813ee531ed66377c222f27dc872680e0
GET /wp-content/themes/CherryFramework/style.css HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/theme53993/main-style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: W/"20b-5dbfaca6cfb00"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/css/style.css
200 OK 27 kB URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/css/style.css
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (646)
Hash 345975b47c51da0493cea681c2c86e90
cb0dcb61bfcaa98ec0307a2649db761c381802d4
1dd7aa4c3e44ded1f1f8752e8884ac4250b2053fdd40a854daccdeb2f8d28361
GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/CherryFramework/style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-e06b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data
Hash fe3e5be2baa0126122ba9367ebab73c8
40bec99106dfab5f3721ed725483eb618a9016cd
8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://centriboet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Jan 2023 21:20:14 GMT
expires: Sun, 21 Jan 2024 21:20:14 GMT
cache-control: public, max-age=31536000
age: 84349
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-shake.min.js?ver=1.13.2
200 OK 904 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-shake.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (644)
Hash 6c1e787801dccadb8aa633e37b7fe2c4
0873fb2000ca4536f9b0c889798f5df3005be9d9
3b1df97a1a971777eb156e4137b7d508a9f612eae5cf70ea17a4dab3c052dd52
GET /wp-includes/js/jquery/ui/effect-shake.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"33e-5ec7a0550eb25"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/parallax-slider/img/spinner.GIF
200 OK 26 kB URL HTTP/2 centriboet.com/wp-content/themes/theme53993/parallax-slider/img/spinner.GIF
IP
ASN #6739 Vodafone Ono, S.A.
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6b6981691ac18df8f99c14dc56df084a
7c52c2644f97c52bebc8f4b0be2c90c9a939c173
e73cdd83f958a7c78c7c4024afa57a5dcf2ef66a4e4c9d4720ccf7bbe3012792
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/theme53993/parallax-slider/img/spinner.GIF HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/wp-content/themes/theme53993/main-style.css
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/gif
content-length: 26125
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "624d7b8c-660d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/uploads/2011/07/IMG_3712.jpg
200 OK 76 kB URL HTTP/2 centriboet.com/wp-content/uploads/2011/07/IMG_3712.jpg
IP
ASN #6739 Vodafone Ono, S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 820x474, components 3\012- data
Hash 014f3e876522b672ca78ee027538024c
460a89b6c62aef73172e7749fbae31d16877987c
572847eb32e7aa4a1b13d9792aa6e52f28caa8b5064d88252174f04eed66564c
GET /wp-content/uploads/2011/07/IMG_3712.jpg HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/jpeg
content-length: 75663
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
etag: "624d7b8c-1278f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3bbec64cde333b8c3068e63b2adbf2bb
e1fad0f09db1e1b01c9d36d7dbc8163682dcc533
850bdbc33df9ee9c938ed81f35ee0a6782fe99f49f65359e1a66ff21e282ffc9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
centriboet.com/wp-content/uploads/2017/03/cropped-Centriboet-1-192x192.png
200 OK 5.3 kB URL HTTP/2 centriboet.com/wp-content/uploads/2017/03/cropped-Centriboet-1-192x192.png
IP
ASN #6739 Vodafone Ono, S.A.
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 34ba0d8dfffc958da35b2254c5d93966
08bfe36b64651924185e781a78f3c4fdef040517
059a578b82fc4c10d4cd721b1d84fbd58994091fbbd5d92ec1ff50c6e5d39168
GET /wp-content/uploads/2017/03/cropped-Centriboet-1-192x192.png HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:03 GMT
content-type: image/png
content-length: 5335
last-modified: Wed, 06 Apr 2022 11:37:49 GMT
etag: "624d7b8d-14d7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.2
200 OK 3.9 kB URL HTTP/2 centriboet.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.2
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (10565), with no line terminators
Hash 7d1f36710e4067f5d373ba588cdb14c5
2dba4c185e62985dd9fb215d7da2821a4260c2f4
0be4fdc914b46684275b8a16de06aa4a2b1c81d276dda516e32416d1a08e115e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 12:14:20 GMT
vary: Accept-Encoding
etag: W/"63bd569c-2945"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4879)
Hash e76227e2e2292fc8f5bb0f23d96fa934
ffb83448784800ffe80cacaf30f06ec6b6a0c581
011168474626e192fc4fb0faf8f63f465d3e0c5fceaea6e74aa946f27e4e1374
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 22 Jan 2023 20:46:03 GMT
expires: Sun, 22 Jan 2023 20:46:03 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 2081075330872397440
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-lazy-load-master/js/device.min.js?ver=1.0.0
200 OK 1.2 kB URL HTTP/2 centriboet.com/wp-content/plugins/cherry-lazy-load-master/js/device.min.js?ver=1.0.0
IP
ASN #6739 Vodafone Ono, S.A.
File type ASCII text, with very long lines (2754)
Hash 03e09755873e3d8042593c427c7bcbfe
761177e9be21a49d8a2c05d554b2a949477f6bed
d4cb2d672e36329366116ca335dc53b38d9632f1a65157676e1fee6b256c6b8e
GET /wp-content/plugins/cherry-lazy-load-master/js/device.min.js?ver=1.0.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 09:27:22 GMT
vary: Accept-Encoding
etag: W/"62a30e7a-ada"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a618971ebc90b5698ddbabc4637e3345
f920b73a7c9b57d77194ba8ba406664d8469b6b6
f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5701
Expires: Sun, 22 Jan 2023 22:21:04 GMT
Date: Sun, 22 Jan 2023 20:46:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a618971ebc90b5698ddbabc4637e3345
f920b73a7c9b57d77194ba8ba406664d8469b6b6
f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5701
Expires: Sun, 22 Jan 2023 22:21:04 GMT
Date: Sun, 22 Jan 2023 20:46:03 GMT
Connection: keep-alive
centriboet.com/wp-content/plugins/cherry-lazy-load-master/js/cherry.lazy-load.js?ver=1.0
200 OK 1.3 kB URL HTTP/2 centriboet.com/wp-content/plugins/cherry-lazy-load-master/js/cherry.lazy-load.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
Hash 606a0e232f13f46f83a57cd51886bb48
cff982de5b278db07ea80e7f4299c9b259819168
4246df5ef5a49bb12d61fb70005012d27fc2c27b54bc2cd5e03f379eedab9109
GET /wp-content/plugins/cherry-lazy-load-master/js/cherry.lazy-load.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 09:27:22 GMT
vary: Accept-Encoding
etag: W/"62a30e7a-1204"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a618971ebc90b5698ddbabc4637e3345
f920b73a7c9b57d77194ba8ba406664d8469b6b6
f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5701
Expires: Sun, 22 Jan 2023 22:21:04 GMT
Date: Sun, 22 Jan 2023 20:46:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a618971ebc90b5698ddbabc4637e3345
f920b73a7c9b57d77194ba8ba406664d8469b6b6
f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5701
Expires: Sun, 22 Jan 2023 22:21:04 GMT
Date: Sun, 22 Jan 2023 20:46:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d78dc13-3c8d-4c31-8f64-3f9de4ba79d1.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d78dc13-3c8d-4c31-8f64-3f9de4ba79d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2aec02a691f126259e2a3c701e322ffe
af9161eefc1ee381a8f531c593ea7354d73493eb
e0094d54ca9bbbc4154abec2ce152453ddb1544e020b4a859e5da1f7073a26d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d78dc13-3c8d-4c31-8f64-3f9de4ba79d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4796
x-amzn-requestid: 9ad3dcbc-3d19-4619-a8cb-b316a8d51290
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e7ULpHgKIAMFmYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c79a4a-769bcf2f4d7787d007ec30e2;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 07:05:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -TjivJmHgT_N2QWC1rn8ng1sl5h53FcgoU9ALMINJEY6onseYEWGRw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 22 Jan 2023 08:07:27 GMT
age: 45516
etag: "af9161eefc1ee381a8f531c593ea7354d73493eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff250419d-5512-4c6b-9460-69d68f74273d.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff250419d-5512-4c6b-9460-69d68f74273d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e5cb3e8d03fffcd307c5ebaef08167
1a813821d15afd416b82c3343a7920a0ffc909cb
84a81b6f63faa3f17a20222b8fa389761a0fb0512a1549b4848849c0425539c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff250419d-5512-4c6b-9460-69d68f74273d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7656
x-amzn-requestid: 6e1ebd9d-6ef0-48d0-a891-51bbf914ed42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNlYHaUoAMFr-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c88-479e8fb72b0b248d020d9e77;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DaWs0RT0IupgLoLeQZYbdYdvYFd02bXrdQBFYpqLxwmKf1bKhh_wgQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:48:06 GMT
etag: "1a813821d15afd416b82c3343a7920a0ffc909cb"
content-type: image/jpeg
age: 82677
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb253a292-08cb-455a-bf4c-63bdca08af64.webp
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb253a292-08cb-455a-bf4c-63bdca08af64.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ec85cf23f6ed6a70e62e17998dfcede
2a690f14cf97f33da2c4f4b21c737a7ca37665b4
ae3cedd8f51f9ed2d996f1d75e7288802d68fa3c27d928934311e4d8821940cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb253a292-08cb-455a-bf4c-63bdca08af64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7609
x-amzn-requestid: 86dec496-ff1b-4db8-9bcb-12275f6feeb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNkBGiOIAMFaCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c7f-16c24501673bc2161c1e8a3b;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EIRH5l-dSShdZbMvwSEE8jKooGny-prLtbXwx8ZNUi0Wfj4GItKV7g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 22:08:36 GMT
age: 81447
etag: "2a690f14cf97f33da2c4f4b21c737a7ca37665b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e71636bb9a13ad7d52d253e16cd6a3f
401dd58e34982d3434739b9a2f7182487ea1cac5
1ac336df72b6eb569983e197f094378a26a175113249bedca0610cabd57e2e54
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8057
x-amzn-requestid: 5469b005-6740-4f3d-80ca-a45fd39cae68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNkCFiZoAMF8oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c80-210da08f113a3273257b7d61;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: j3SoP46ER0JjOaLh363bQ9QW4ZIW19_rbgeQ7Ey8W-zgyGMMLSLccA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:48:17 GMT
etag: "401dd58e34982d3434739b9a2f7182487ea1cac5"
content-type: image/jpeg
age: 82666
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc284e6ec-6c43-4a8d-a291-83519d5a4d4c.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc284e6ec-6c43-4a8d-a291-83519d5a4d4c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f86ec004a2042b4030cd2cce2bf1e1d
e3c00dcc55f095f03a6f4505960ac1cee0b3877c
64b5084d4145d5931af05c335d21e31e75db30b1f9e8a2efd92fc4cd0aa7ac07
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc284e6ec-6c43-4a8d-a291-83519d5a4d4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8221
x-amzn-requestid: 02db02af-4f05-450d-9370-0e7a9dda6948
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHOEWGUMoAMF2QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5d4e-050e7cdf21878aa159f36d0b;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:46:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VtzsQ7NI9ODiQfxm_EaSDsizPQhDOSH3O23UEaHg1KI9bg8imLdOnw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:48:16 GMT
age: 82667
etag: "e3c00dcc55f095f03a6f4505960ac1cee0b3877c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8656702f08344d3a4658bc43a9074a1f
fba424e1d09cbdc839ca320458b51715dafbbccc
0b0ac963c377b07f843637348f3d7c41d2aca89540ab8c2b80ef5fbbf466fee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13848
x-amzn-requestid: f7e3e9da-a152-430d-b1e6-c2e00450a000
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEu-RGd0IAMFhFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb5ec1-4a2bc1a802a71bb81bda31b9;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:40:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jbdFknlNlZJVfe7TfMXuLbjYeIsUwvztb-74WeDRY80ruCGiKeXqJQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 22 Jan 2023 15:09:14 GMT
age: 20209
etag: "fba424e1d09cbdc839ca320458b51715dafbbccc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31a96aea31b9bde911c809b90b4b2340
67ac2a598c4d19de11e6a81eabb7af7aeec45dcb
22eb898eb4c8aafb440456924cb0a74529b3f18dbc9e0fa11fdfeeef4ac37908
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
centriboet.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.2
200 OK 4.3 kB URL HTTP/2 centriboet.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.2
IP
ASN #6739 Vodafone Ono, S.A.
File type HTML document, ASCII text, with very long lines (12652), with no line terminators
Hash 066f853b17941ff143bd40bbec22973d
8cdbc3919e3acb99acdf585df6f3b9a380289d35
1f2139505750b8e20dd24f50f245c7c3e344ffa881f90bcd70872c9af72826e5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 12:14:20 GMT
vary: Accept-Encoding
etag: W/"63bd569c-316c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bb5fac1f289cb91381d3d1a07094b179
df6f8fe7a21efb35290d24f2b8b0fe809cae8d33
34472778a647b2db33e669d8582b510d94d9e0d355d77c73d643b7495b0f6997
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=centriboet.com&callback=_gfp_s_&client=ca-pub-6520255139364936
200 OK 254 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=centriboet.com&callback=_gfp_s_&client=ca-pub-6520255139364936
IP
File type ASCII text, with very long lines (395), with no line terminators
Hash f68fba67d99558bae54d0343c35252c7
46b5f4429df80484ed26eaaea1484a2350e8194a
e62ec583bc965cd47f83f87d66c7c44b981139d1370138cc7cefcf627b3464aa
GET /gampad/cookie.js?domain=centriboet.com&callback=_gfp_s_&client=ca-pub-6520255139364936 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 22 Jan 2023 20:46:03 GMT
server: cafe
cache-control: private
content-length: 254
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=centriboet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=centriboet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=centriboet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 22 Jan 2023 20:46:03 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=centriboet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=centriboet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=centriboet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 22 Jan 2023 20:46:03 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31a96aea31b9bde911c809b90b4b2340
67ac2a598c4d19de11e6a81eabb7af7aeec45dcb
22eb898eb4c8aafb440456924cb0a74529b3f18dbc9e0fa11fdfeeef4ac37908
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cc298ded3fc0f058105ddd7b442f5b55
38d43fe921b0b34e4a762598c3ad003956592c04
61a166c11ee3bc04f5be109d262b7f69525e428b1a85f68e00a58de4ff26b4c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bb5fac1f289cb91381d3d1a07094b179
df6f8fe7a21efb35290d24f2b8b0fe809cae8d33
34472778a647b2db33e669d8582b510d94d9e0d355d77c73d643b7495b0f6997
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 61ad64be1d17c072bde0da4ad094fe74
be20a360ad4314e4488560d3dd9bf6f6d95ac01f
27242c742941dbf7b04c1998d0971b1c5c738311c3ea9925dfeaee3db4f93b4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sun, 22 Jan 2023 20:46:04 GMT
expires: Sun, 22 Jan 2023 20:46:04 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 12:37:02 GMT
expires: Tue, 16 Jan 2024 12:37:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 547742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f9788e381983082a10350bba3234afb
dc16e103c5174374433d4432b8d6171a3960dbbc
961980c0a8fa08aca4b97e793686994e2d85e5272cebeb48229611a88ecabc83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 20:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 511 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 6a07cf655bc803e35faefa0dba07c21f
389eb5ea64e72ddd9b6d96569b8f09440bdf13b9
7ad51972f3483bd707acf0d1c474145540c3804d5c3d15d78896aee336c129bc
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 22 Jan 2023 20:46:04 GMT
date: Sun, 22 Jan 2023 20:46:04 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-LtP_wAzCeCfDeAUvPdgCRA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 511
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7918883e-706a-42d5-b966-cd7d5fb64f78.jpeg
200 OK 3.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7918883e-706a-42d5-b966-cd7d5fb64f78.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce9c90c64a81cfd16050966c2b5ddf57
a2929122b2d2e252f39d23857cd7a2ed4651bb27
6647be8f5be621ef9b0cfe6585cb92c868951a95acf8c9c66d9eec6dc95d34c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7918883e-706a-42d5-b966-cd7d5fb64f78.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3084
x-amzn-requestid: 034173f8-edba-45b9-bbbc-a7d737b45e26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fFM68EDMIAMF3Iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb8eac-3a22865376bbdcde3ef17088;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 07:05:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lPrb0OiQtQrd0-1R9wmsMzYwRydWPW9lBTAFUu9SPchT7WZUIVzGdw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 22 Jan 2023 08:08:13 GMT
age: 45477
etag: "a2929122b2d2e252f39d23857cd7a2ed4651bb27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.debouncedresize.js?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.debouncedresize.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/CherryFramework/js/jquery.debouncedresize.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
etag: W/"15b-5e11327540800"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-301a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 08:15:04 GMT
vary: Accept-Encoding
etag: W/"62a2fd88-7054"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-2112"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-29e8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-1dc4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-clip.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-clip.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-clip.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"30c-5ec7a0550e355"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/css/dist/block-library/style.min.css?ver=ebc0e58e277ef15de4ef982df04d5a83
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/css/dist/block-library/style.min.css?ver=ebc0e58e277ef15de4ef982df04d5a83
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=ebc0e58e277ef15de4ef982df04d5a83 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 16:17:26 GMT
vary: Accept-Encoding
etag: W/"63750d16-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-1c5a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-explode.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-explode.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-explode.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-452"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-fade.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-fade.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-fade.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"1fd-5ec7a0550df6d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-fold.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-fold.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-fold.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"3ec-5ec7a0550d3b5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-5486"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-slide.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-slide.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/effect-slide.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"385-5ec7a0550cfcd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-186c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:19:29 GMT
vary: Accept-Encoding
etag: W/"628dd881-9cc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/droppable.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/droppable.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/droppable.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-19fb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-pulsate.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-pulsate.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-pulsate.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"2a0-5ec7a0550c7fd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/parallax-slider/js/jquery.simplr.smoothscroll.min.js?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/parallax-slider/js/jquery.simplr.smoothscroll.min.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/theme53993/parallax-slider/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Fri, 10 Jun 2022 08:52:10 GMT
etag: W/"300-5e1140dca0ee2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/parallax-slider/js/parallaxSlider.js?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/parallax-slider/js/parallaxSlider.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/theme53993/parallax-slider/js/parallaxSlider.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 08:52:41 GMT
vary: Accept-Encoding
etag: W/"62a30659-59b7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-4794"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"2e1-5ec7a0550d3b5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/selectable.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/selectable.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/selectable.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-1188"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-bounce.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-bounce.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-bounce.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"3cf-5ec7a0550d3b5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans&subset=latin
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&subset=latin
IP
GET /css?family=Open+Sans&subset=latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 22 Jan 2023 20:46:02 GMT
date: Sun, 22 Jan 2023 20:46:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-ceb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-72b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:19:29 GMT
vary: Accept-Encoding
etag: W/"628dd881-194b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-1126"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-d4a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-228c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/main-style.css
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/main-style.css
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/theme53993/main-style.css HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Fri, 10 Jun 2022 08:49:08 GMT
vary: Accept-Encoding
etag: W/"62a30584-1405e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-1c1f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-53c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-scale.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-scale.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/effect-scale.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"2c3-5ec7a0550e355"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-d453"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-size.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-size.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-size.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-9ab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/style.css
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/style.css
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/theme53993/style.css HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-767"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-2782"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-8f7b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-4911"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 25 May 2022 07:19:29 GMT
etag: W/"1f2-5dfd0e4d8608d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-1721"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-226e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/dialog.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/dialog.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/dialog.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-329f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/progressbar.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/progressbar.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/progressbar.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-9ec"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-ada"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-7ad0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-17278"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/swfobject.js?ver=2.2-20120417
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 06 Apr 2022 11:37:49 GMT
vary: Accept-Encoding
etag: W/"624d7b8d-27f7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-1828"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-9ca"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-lazy-load-master/css/lazy-load.css?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-lazy-load-master/css/lazy-load.css?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-lazy-load-master/css/lazy-load.css?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Fri, 10 Jun 2022 09:27:22 GMT
vary: Accept-Encoding
etag: W/"62a30e7a-8ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-27f6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-636f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-b61"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/theme53993/parallax-slider/js/jquery.mousewheel.min.js?ver=3.0.6
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/theme53993/parallax-slider/js/jquery.mousewheel.min.js?ver=3.0.6
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/theme53993/parallax-slider/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 08:51:40 GMT
vary: Accept-Encoding
etag: W/"62a3061c-570"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/en/
200 OK 0 B IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /en/ HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: qtrans_front_language=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://centriboet.com/en/wp-json/>; rel="https://api.w.org/", <https://centriboet.com/en/wp-json/wp/v2/pages/203>; rel="alternate"; type="application/json", <https://centriboet.com/en/>; rel=shortlink
set-cookie: qtrans_front_language=en; expires=Mon, 22-Jan-2024 20:46:02 GMT; Max-Age=31536000; path=/
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
200 OK 0 B URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
IP
GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 08/03/2021 17:42:29
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: 6a3ecfb7abce577b84969b7b3a3242a6
cdn-cache: HIT
cf-cache-status: HIT
age: 315679
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78db23028cecb4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-680"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Tue, 10 Jan 2023 12:14:20 GMT
vary: Accept-Encoding
etag: W/"63bd569c-af3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-2458"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:19:29 GMT
vary: Accept-Encoding
etag: W/"628dd881-132e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-blind.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-blind.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/effect-blind.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"360-5ec7a0550d79d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-transfer.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-transfer.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/effect-transfer.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"1aa-5ec7a0550e355"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 11:37:48 GMT
vary: Accept-Encoding
etag: W/"624d7b8c-1735"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/css
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"d9-5ec7a054f9b31"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-459f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/effect-highlight.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/effect-highlight.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/effect-highlight.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
etag: W/"278-5ec7a0550c415"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-99ea"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/
302 Found 0 B IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie: qtrans_front_language=en; expires=Mon, 22-Jan-2024 20:46:02 GMT; Max-Age=31536000; path=/
location: https://centriboet.com/en/
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans+Condensed:300&subset=latin
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans+Condensed:300&subset=latin
IP
GET /css?family=Open+Sans+Condensed:300&subset=latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 22 Jan 2023 20:46:02 GMT
date: Sun, 22 Jan 2023 20:46:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-436"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-81a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.isotope.js?ver=1.5.25
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.isotope.js?ver=1.5.25
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery.isotope.js?ver=1.5.25 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-3cb9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-2a0a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-includes/js/jquery/ui/button.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 centriboet.com/wp-includes/js/jquery/ui/button.min.js?ver=1.13.2
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-includes/js/jquery/ui/button.min.js?ver=1.13.2 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:08:22 GMT
vary: Accept-Encoding
etag: W/"63624196-17fa"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.ba-resize.min.js?ver=1.1
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.ba-resize.min.js?ver=1.1
IP
ASN #6739 Vodafone Ono, S.A.
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/CherryFramework/js/jquery.ba-resize.min.js?ver=1.1 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-44a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
centriboet.com/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
200 OK 0 B URL HTTP/2 centriboet.com/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
IP
ASN #6739 Vodafone Ono, S.A.
GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1
Host: centriboet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://centriboet.com/en/
Cookie: qtrans_front_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 20:46:02 GMT
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 07:47:44 GMT
vary: Accept-Encoding
etag: W/"62a2f720-50bd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
89.140.72.153
23.36.77.32
35.241.9.150
93.184.220.29
188.114.99.234
0.0.0.0