ticketguatemala.com/maulana-ahmed-ali-lahori-pdf-30-new
302 Found 0 B URL User Request GET HTTP/2 ticketguatemala.com/maulana-ahmed-ali-lahori-pdf-30-new
IP
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /maulana-ahmed-ali-lahori-pdf-30-new HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://ticketguatemala.com
content-length: 0
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ticketguatemala.com/wp-content/themes/ticket-guatemala/bootstrap/css/bootstrap.css
200 OK 20 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/bootstrap/css/bootstrap.css
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash d59729439a203fc474f5677b8d18d8bb
2ce613073db4961ad118ac063421eb62cefc426e
8c1a4c25634d5841924aab1848acc9dcbc3d5672183053c8b71ff2139b65d7c3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/bootstrap/css/bootstrap.css HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 19 Feb 2019 14:34:52 GMT
etag: "05c6c140c-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20425
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/style.css?v=800
200 OK 4.7 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/style.css?v=800
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash 776e550c09a3ec23a6306fcd0f371b40
53bc390b0bdc4e1999b37a6fcc69fa2eec6070dc
ce565125a8407c1dfac285f178d899ccaea341df61c051ac12c34e17852b23a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/style.css?v=800 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2019 14:19:19 GMT
etag: "05c8bb467-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4665
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?ver=6.4.2
200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?ver=6.4.2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js?ver=6.4.2 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 17:22:26 GMT
expires: Thu, 05 Dec 2024 17:22:26 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 439462
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ticketguatemala.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2
200 OK 14 kB URL GET HTTP/3 ticketguatemala.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (57084)
Hash 99ab466e0866c823ae5db517d59cebd1
5595a586cbd42b31377681b9d35293278d75d336
698b89c0da3d319754d6a837b5e6d4e6a42dc402d9ffd7559b8c4cb29c644340
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 07:19:01 GMT
etag: "0654b3665-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13607
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
www.googletagmanager.com/gtag/js?id=UA-117943913-1
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-117943913-1
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4179)
Hash a8c31849c77ad765086f3ddde4fcda60
122a15ee8f9238623227b5431f3f9fe81ea2f4a2
b30ee162f28056a1b3d9c7fd7a970f93c0e8a3d2f3961ed67555849e0d2881f7
GET /gtag/js?id=UA-117943913-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 19:26:48 GMT
expires: Mon, 11 Dec 2023 19:26:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69101
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ticketguatemala.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7
200 OK 2.9 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (10241), with no line terminators
Hash 7be65ac27024c7b5686f9d7c49690799
241ada4a86443adc5623d1a3a8018a96d9de6d5a
52db930f81d97113dde679cac624cb5435b56d4ac486e91a0b6692d2cb615a84
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 11 Jul 2023 21:05:40 GMT
etag: "064adc424-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2894
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
200 OK 878 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash 0e4a098f3f6e3faede64db8b9da80ba2
65b9b3c849f3fbdd783ddbfb183616ff55c7ee53
ab21762c3f447aa08cbefd5ea3866165f925bd5058a9ae19e23721462de6fb60
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 11 Jul 2023 21:05:40 GMT
etag: "064adc424-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 878
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
200 OK 3.9 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type HTML document, ASCII text, with very long lines (12943), with no line terminators
Hash 5bc2b1fa970f9cecb3c30c0c92c98271
7c6bb87aaa24714b7b3b3c86dd932736a80270a9
1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 11 Jul 2023 21:05:40 GMT
etag: "064adc424-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3918
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.5.1
200 OK 6.9 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.5.1
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (29701), with CRLF, CR line terminators
Hash 7185f3e60081413853223cf98b516849
0fd5a03b8d3af0bf1689da079d5081baf5a863fd
205bc92483f9fad148adf5dfd3171cf713614f10738dc71d018cb4fbc5de3b18
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.5.1 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6870
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/css/animate.css
302 Found 0 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/css/animate.css
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/css/animate.css HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://ticketguatemala.com
content-length: 0
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/css/jquery-ui.css
302 Found 0 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/css/jquery-ui.css
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/css/jquery-ui.css HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://ticketguatemala.com
content-length: 0
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/css/icons.css?v=1062
302 Found 0 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/css/icons.css?v=1062
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/css/icons.css?v=1062 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://ticketguatemala.com
content-length: 0
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/content-box.min.css?ver=3.16.16
200 OK 148 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/content-box.min.css?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (527), with no line terminators
Hash 2b3999f7f11f2d5f6429f4b157167af5
7cade342040be3e5a38567c42d6a235397382a57
471305053bd0c57130556ddb916a7a2e971657dc03c2ac2dc05155c6883fa4be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/content-box.min.css?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2017 18:35:00 GMT
etag: "059a5b3d4-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 148
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.7
200 OK 42 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1d631ff6e5e0c48d06c17e294924c762
94d01897df7c13fd9d5eef562dca4873488cc9d4
18fd322583b992be8df5cc0713fee5fc2ec1f43004f1d838cfe1a76d49cb8f4a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Wed, 20 Feb 2019 21:06:12 GMT
etag: "05c6dc144-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 41860
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.4.2
200 OK 4.5 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.4.2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (27639), with no line terminators
Hash 36ea4805809e6b690c2f5126a0808297
4531470deab3efd0b8499f29a323a1b45f0efced
4354449ab7a164ef5486d12020f3bc403b8ff104a8da73e9f9332106b86b061c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.4.2 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 19 Feb 2019 14:18:39 GMT
etag: "05c6c103f-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4453
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.16.16
200 OK 2.6 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (13120), with no line terminators
Hash 67385345a1395ce7c2c7202a63891eb8
a2cbbe857d54e0c2da234a63652fda5117a50832
55353f4713fab9442fe0da38dfa31dc6cb42cb8a292eff287bb3e148f3c70918
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2017 18:35:02 GMT
etag: "059a5b3d6-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2589
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/slick.min.css?ver=3.16.16
200 OK 1.3 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/slick.min.css?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Unicode text, UTF-8 text, with very long lines (5873), with no line terminators
Hash 9e8851331f2d9dcc8138b66061485dbe
eefe09d4e3f0a726cb8eb23eff73a0e335e30377
08f9294ce040b6e950f5db0097ba81c6324da28898040b1d68fce6f24c500f6e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/slick.min.css?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2017 18:35:02 GMT
etag: "059a5b3d6-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1341
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/css/icons.css?ver=3.16.16
200 OK 399 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/css/icons.css?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with CRLF line terminators
Hash d1bf2259b160993796fa278c4a652c72
1c19c51cd93f6bb7243b486b5dc7d7ecd4111b75
e18a7e7c066be5b361790012308feff237d8d95a175feee93f5304efbaf1651c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/css/icons.css?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2017 18:35:00 GMT
etag: "059a5b3d4-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 399
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.16.16
200 OK 5.3 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (64385), with CRLF line terminators
Hash 9de78c593950f1caca6e6068cb353f92
707dbccc34027929a9bbef5f4a16cb8dc38f4d27
fdf1f6b74140e75ff45ecec7fe84540a6c0c2f307946e99cddb1d70da6811654
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2017 18:35:00 GMT
etag: "059a5b3d4-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5315
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.5.1
200 OK 37 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.5.1
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (27287), with CRLF, CR line terminators
Hash a5742574b0618148859d6222ce3cfc3e
9f41b9e5fd4a0ff2c71bbe33b81edd8c35f7fbc7
4e4a1e2eacb294e89e5d65b816f0cbacad823a3c480d90764b7d727112d9ec1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.5.1 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 37073
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.16.16
200 OK 443 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type HTML document, ASCII text, with very long lines (1112), with no line terminators
Hash a24691c4bf1d174a305b5f7ed78b3148
deff525531ecc8c4960768437c64f31f5acf68b3
ab0cdfc06ca24973e56dd55cb9f1742df7a74024031e1f4d9e9e95ffb2c58b48
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2017 18:35:10 GMT
etag: "059a5b3de-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 443
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.5.1
200 OK 17 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.5.1
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (64561), with CRLF, CR line terminators
Hash c67e33f83e885983fa127d661fb75656
c61e7a94b85fd2d17468d63c0a3871a945fc2b31
33e9157f2819e4b59f1d69129361e494f315d863f466ca1c1573aa1f0c4cbbed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.5.1 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 17286
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/slick.min.js?ver=3.16.16
200 OK 9.8 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/slick.min.js?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (31975)
Hash 4d85c615332d5e23f2a0a3ea3599a79c
39e8ee2f22350d1abff782ec80f3e23aff92b5a5
d8b397b9466a43388937df98e142c322ee70679f8a2d610c462927b3660f362a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/slick.min.js?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2017 18:35:10 GMT
etag: "059a5b3de-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 9766
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.16.16
200 OK 565 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (1430), with no line terminators
Hash 82ecd80a230f5845e8a1859e606ff600
9e3298b409824a8c1031ca2fabba5b1973cd8384
ed5b0f10d76535a66cf69210fb0656ada3621dc0eaad98f13dc37eed471cb728
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2017 18:35:08 GMT
etag: "059a5b3dc-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 565
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/slick-custom.min.js?ver=3.16.16
200 OK 747 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/slick-custom.min.js?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type HTML document, ASCII text, with very long lines (3133), with no line terminators
Hash 338334dd8712e5e5f9f9f14aa3af8254
c28f963a2729697c5e5ca9e943d45e8dd0b18da8
80ba9ff0ae6bed637c7287db558b6fcdaa8f8447aab6e8d041b3c9eae500f7dd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/slick-custom.min.js?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2017 18:35:10 GMT
etag: "059a5b3de-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 747
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/bootstrap/js/bootstrap.js
200 OK 19 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/bootstrap/js/bootstrap.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (315)
Hash d810a38ca2781735a27cba0625a027db
07da27bb41cf623acc959d70b9611d09c01fa5a5
71577fb46a22fa031506bab9c5ddb4640e38ef10a1b4959a11288b41ce4b0757
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/bootstrap/js/bootstrap.js HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 19 Feb 2019 14:36:02 GMT
etag: "05c6c1452-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 19175
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/bootstrap/js/popper.min.js
200 OK 7.0 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/bootstrap/js/popper.min.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (20363)
Hash 84910d80281fc6b554f4ae2d14612494
af6f046adaab7e1501adee034fb7c366b8c059fc
106b3d4f5c4c1ddbccd6078cf233e9a28f04675575551b26709cfc381c8434b0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/bootstrap/js/popper.min.js HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 19 Feb 2019 14:36:14 GMT
etag: "05c6c145e-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7007
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/js/scripts.js?a=143
200 OK 591 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/js/scripts.js?a=143
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (378)
Hash db158fad3382915ab0a5b6264e4c645a
755072692c664f5a1e48e0fd2f17c670615dfb8a
e4eada69f44135cb117e78237d257085e709fddee7ab90b842cc6fddc860cee0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/js/scripts.js?a=143 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 05 Mar 2019 01:08:11 GMT
etag: "05c7dcbfb-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 591
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/js/jquery.waypoints.js?a=143
200 OK 3.5 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/js/jquery.waypoints.js?a=143
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash 1115c65bd62165d952fac7c1b6918b2a
cae1eda71e047a12a2dddaa77a4acac54f6b2cb2
d1e3b0a0cf077e2b2d51e3d28a36273bb1fa5b03db541b5e708a9637b39b8d6e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/js/jquery.waypoints.js?a=143 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 19 Feb 2019 14:34:34 GMT
etag: "05c6c13fa-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3505
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/js/all.js
200 OK 353 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/js/all.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (3394)
Size 353 kB (353013 bytes)
Hash a4b28c53f67b8e03ec3df1b4621febba
780a2a78e2d56b931fd23bdae072208d31d1988a
6eef3c5d533d8ff19c43d6da708b03c8ab2631825bf21995a14665d8a8a9d472
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/js/all.js HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 19 Feb 2019 14:34:35 GMT
etag: "05c6c13fb-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 353013
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
200 OK 2.3 kB URL GET HTTP/3 ticketguatemala.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (8171), with no line terminators
Hash dda652db133fddb9b80a05c6d1b5c540
60c8514c57a5db2980c4b046b0dd479bd427357b
c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 11 Jul 2023 21:07:04 GMT
etag: "064adc478-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2320
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/logo.svg
200 OK 5.2 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/logo.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (20937), with no line terminators
Hash 9c7d6336fec7d13fc167f1bd1900ff11
b553f409e1553799efcf29b9c645b55901967d06
9f697d731ce321a84f196f22e56055eec8efe67c92b6e6bcc40e63c04bbe60b4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/logo.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:27:41 GMT
etag: "05c6d7ffd-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5197
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/js/jquery-ui.js
200 OK 121 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/js/jquery-ui.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (1002)
Size 121 kB (120945 bytes)
Hash ab5284de5e3d221e53647fd348e5644b
75c20acdc6cbc6334fe2b918ab7afeec007f969e
4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/js/jquery-ui.js HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 19 Feb 2019 14:34:31 GMT
etag: "05c6c13f7-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 120945
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/fb.svg
200 OK 240 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/fb.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (347), with no line terminators
Hash 41829429b4ed41c42eaca6c0383fade2
7d65a9c4c08e72c996ac01ede2f04606a8eacf91
ee67c706b0d5739dca527a5a5a7a1d4a7461c2116be56228d376311129853692
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/fb.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:27:19 GMT
etag: "05c6d7fe7-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 240
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/tw.svg
200 OK 369 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/tw.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (669), with no line terminators
Hash 2931c90f359902d3061f1f7239d04f7a
a62c625a0af77eeabb0e91f88c7a522f98b3e310
17cf0acbef47f96e39e8ff533f9310017bc89762441870aa63460e95252e21bc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/tw.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:27:56 GMT
etag: "05c6d800c-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 369
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/ins.svg
200 OK 304 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/ins.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (621), with no line terminators
Hash cd5d6f5f420c3c15098636d47a64a581
64db72a274021bb72576bf7304a41cc3174d6ee0
291caa83137ce9efc96751f104a22dd81671180ed960ff11977d5efe28d854d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/ins.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Feb 2019 14:10:59 GMT
etag: "05c6eb173-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 304
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
200 OK 2.4 kB URL GET HTTP/3 ticketguatemala.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (6625), with no line terminators
Hash fd7ef2e4737acd74fd0dcdc3b515e304
0d792b33f12a48ee8aaaf2560a63a5682470645b
1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Wed, 08 Nov 2023 07:19:01 GMT
etag: "0654b3665-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2402
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 35 kB URL GET HTTP/3 ticketguatemala.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a98016751e498c06d434cc022ca1a44
6aa9af5fe436eab9c313de9f0bea072c04637624
da9ed5720b674f0d297fe621ac2d8d518c4e622bef1e9b0d4ae489dee9aa43f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Wed, 08 Nov 2023 07:19:01 GMT
etag: "0654b3665-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34605
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7
200 OK 439 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (999), with no line terminators
Hash 6a0e8318d42803736d2fafcc12238026
c955314a7e0a9a9871329b0f042c8f0b5df49a78
2648a1333fa24d383fd73a6beaac17156ae78f4267ff7407ad60e05a788df44c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 11 Jul 2023 21:05:40 GMT
etag: "064adc424-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 439
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/content-box.min.js?ver=3.16.16
200 OK 609 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/content-box.min.js?ver=3.16.16
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (1800), with no line terminators
Hash d27c232074bc4cb0163435b9304e4355
188f37c32fde29c1de5436441648c40e4ca3d872
7acfbf7a478c51dd873d4479570a8717bf08b03153b457a74939c337d4541219
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/content-box.min.js?ver=3.16.16 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2017 18:35:06 GMT
etag: "059a5b3da-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 609
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.7
200 OK 5.4 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (19706), with no line terminators
Hash 9d22f9409c43e4abec30c88531a5c5df
277c5fa5e6412254b72c12d4cdbc8a8063c2f854
2c0bcb73a9ca9483f3d74255ce1a77f5fbc491f09a5516929e55b4c38c2e9ecd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Wed, 20 Feb 2019 21:07:30 GMT
etag: "05c6dc192-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5387
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=5.7
200 OK 5.4 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=5.7
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (12478)
Hash c8bdfc99c3ad3718bbe2e93ee25f2db5
722bc6b1a4fdeae2440d71072d1499cfb0583c34
ad44888e6834dd14372d63691245513cda17cad9bb7f5ac9df10163ba83108f7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=5.7 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: application/javascript
last-modified: Wed, 20 Feb 2019 21:12:53 GMT
etag: "05c6dc2d5-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5426
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/slider2.png
200 OK 384 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/slider2.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 1462 x 750, 8-bit colormap, non-interlaced
- data
Size 384 kB (384337 bytes)
Hash ae0194989de3c3bcb183361431ecf9d7
08feffc93e69258e32fa67fb054d32445bc6711d
b5e0808c9cbb4f247ebb7fc674da83c4ff3beb570df0903d94cfbe7c44949d1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/slider2.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 21:56:18 GMT
etag: "05c804202-0;;;"
accept-ranges: bytes
content-length: 384337
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/slider4.png
200 OK 379 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/slider4.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 1462 x 750, 8-bit colormap, non-interlaced
- data
Size 379 kB (378552 bytes)
Hash f46691baeb98156d1ad1e8f231481ba3
ea6ef71d56d85098c3fdc6b652aea4bdf8e736d2
08031ce59300c52a64599409ed460f164682449b67a3c4a55ecb2f7b20306e4b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/slider4.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 21:58:41 GMT
etag: "05c804291-0;;;"
accept-ranges: bytes
content-length: 378552
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/admin/assets/images/transparent.png
200 OK 71 B URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/admin/assets/images/transparent.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
- data
Hash 753f6c59bbe7913f21576b58b193bc5a
b3e3885f69e401b3a320010ff7a40dd19768fe3b
8ea078292393a14a8e44be139a7fa6ed09d9c650e210eccca587045239b71cab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/admin/assets/images/transparent.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Thu, 19 Oct 2017 23:18:10 GMT
etag: "059e932b2-0;;;"
accept-ranges: bytes
content-length: 71
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/ham.jpg
200 OK 124 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/ham.jpg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1032x774, components 3
- data
Size 124 kB (123626 bytes)
Hash 121cb72fbb695f56ea9a5b60a4fc3c3e
d145a5f524d337313eb5d8e9ea75ae3a2e8d9f6a
951df0c6d356eb28cab5c9f84ead0dc2e7cbda4df662b54cfb1a63639c3831cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/ham.jpg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/jpeg
last-modified: Thu, 16 Jul 2020 23:34:53 GMT
etag: "05f10e41d-0;;;"
accept-ranges: bytes
content-length: 123626
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/codo-desprendible.png
200 OK 126 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/codo-desprendible.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 359 x 300, 8-bit/color RGB, non-interlaced
- data
Size 126 kB (126373 bytes)
Hash eebd737b5cff8e7298fa2d0b1d6e703a
75225da55a80403d6826cc71e91839731f98fb8d
8aac43e9458884c04a08bc3a9f3bc6df1512f6b60a66c680218bff953c74afe4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/codo-desprendible.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 18:24:52 GMT
etag: "05c801074-0;;;"
accept-ranges: bytes
content-length: 126373
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/NEGRO.jpg
200 OK 63 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/NEGRO.jpg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 586x586, components 3
- data
Hash 1f7ed0cf497ad1efd837f55b7bae4314
e3547fddbebce0f488fac92d1b2941c1e98e56ac
b9ef591c67d2314c0179233c8661f82834007c67d105ab74a3470604e4ca0237
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/NEGRO.jpg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/jpeg
last-modified: Mon, 03 Feb 2020 02:18:03 GMT
etag: "05e3782db-0;;;"
accept-ranges: bytes
content-length: 63356
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2022/01/D_886214-MLM43231152423_082020-O.jpg
200 OK 77 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2022/01/D_886214-MLM43231152423_082020-O.jpg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type JPEG image data, baseline, precision 8, 500x500, components 3
- data
Hash 5d06e3d4a5bb8091d6648f8c03ed98f7
2b2107d795e4117faac2be6db64e036153eb155c
8829a6ae5f81aa4bb9289af6931e2aacbfb6487f9aac07ce7356c4b59d6f3b49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/01/D_886214-MLM43231152423_082020-O.jpg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/jpeg
last-modified: Mon, 17 Jan 2022 16:39:38 GMT
etag: "061e59bca-0;;;"
accept-ranges: bytes
content-length: 76707
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2021/10/3de3c31e-0ddd-418a-aded-3eb3a37978f3.jpg
200 OK 147 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2021/10/3de3c31e-0ddd-418a-aded-3eb3a37978f3.jpg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 880x605, components 3
- data
Size 147 kB (146908 bytes)
Hash 4f432a5b7c2db2ab1ff3d31367819918
4eadd311d9071b23ab955dc735538cf807a7f7ab
eeb5fb30ae03eeb5896ed37eedddbb886a0cb708da336e1e3d4bd67f8f35bd1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2021/10/3de3c31e-0ddd-418a-aded-3eb3a37978f3.jpg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/jpeg
last-modified: Tue, 12 Oct 2021 02:13:08 GMT
etag: "06164ef34-0;;;"
accept-ranges: bytes
content-length: 146908
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/logo_blanco.svg
200 OK 4.9 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/logo_blanco.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (19002), with no line terminators
Hash b8f27fb78cf18fb8fde38f58e1fae79b
b7363c19264cca6f7a01417e6e172b9e29e6eeda
506b02da4de7f0fc6e086661bbcb0c98a5743e160b6eb4df95ae10d6861e82ee
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/logo_blanco.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:27:45 GMT
etag: "05c6d8001-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4939
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/fb_footer.svg
200 OK 267 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/fb_footer.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (419), with no line terminators
Hash ee439aac6f7c807f7ad51ae89c47506c
18528d536f072eb812dda0437c3648a7f705719c
b25453c73cc800298bf162a5faaf806c6b606addfd39b1f1eb0b092313372ed6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/fb_footer.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:27:26 GMT
etag: "05c6d7fee-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 267
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/tw_footer.svg
200 OK 400 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/tw_footer.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (755), with no line terminators
Hash 65bccdb783614580e6854ddd424e3696
eb31234df8a6378cc283e0c36ae4c59534f1a205
9b86817531cde1dd8bec722c9b6a4ef38db84738727e363f8d3bb4d92dc89ced
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/tw_footer.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:28:02 GMT
etag: "05c6d8012-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 400
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/images/ins_footer.svg
200 OK 332 B URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/images/ins_footer.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (703), with no line terminators
Hash 7ee1b9069fd214e2d3cee578756f2f6b
6969f368c78f49e841d058e1a98688dc6a08db34
dcb0286378703c012a5989d7bb85c2cb92ea8c4a5b67295053c85dfa4953b060
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/images/ins_footer.svg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Feb 2019 16:27:33 GMT
etag: "05c6d7ff5-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 332
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/slider1.png
200 OK 325 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/slider1.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 1462 x 750, 8-bit colormap, non-interlaced
- data
Size 325 kB (325384 bytes)
Hash 23dd8552e5b36d659244ffc7bcaf7b8d
3708c1623d645b74a93a8fec74bd59fcb56f349f
cd7eab5b0dcdf3903e5c0a4f25c504a64367b7f73129e0ffabeab9622a5ec258
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/slider1.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 20:06:52 GMT
etag: "05c80285c-0;;;"
accept-ranges: bytes
content-length: 325384
date: Mon, 11 Dec 2023 19:26:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/Brazaletes-Tyvek.png
200 OK 123 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/Brazaletes-Tyvek.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 359 x 300, 8-bit/color RGB, non-interlaced
- data
Size 123 kB (122577 bytes)
Hash 2d28f3d124d4935cb033f890c787a697
a093cb54a144e19e5207416c49e04d66b52e2633
1af6759a87f7a6b1809ac2685c665c12ef2b9f6d48bee4d5ea42781da3941530
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/Brazaletes-Tyvek.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 18:27:00 GMT
etag: "05c8010f4-0;;;"
accept-ranges: bytes
content-length: 122577
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/03/Brazaletes-Tyvek-con-codo-desprendible.png
200 OK 130 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/Brazaletes-Tyvek-con-codo-desprendible.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 359 x 300, 8-bit/color RGB, non-interlaced
- data
Size 130 kB (129550 bytes)
Hash 14c6028573857a0af182f44845911b1b
a8d79cd9a082ecaee0e4a37544f04d6a69b9f297
b0ddf3af69c69520ab559b73031eff88bfa602509dd40bb4f3f858a930476bf8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/Brazaletes-Tyvek-con-codo-desprendible.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 18:26:16 GMT
etag: "05c8010c8-0;;;"
accept-ranges: bytes
content-length: 129550
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2019/02/tickets-peque%C3%B1o.png
200 OK 101 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/02/tickets-peque%C3%B1o.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 359 x 300, 8-bit/color RGB, non-interlaced
- data
Size 101 kB (100691 bytes)
Hash ed5fa7492b5f0a95b57b3e13ea089ee9
42c40b180a13aba3efc8a5d14b1a942002233312
b4c9db3b1658242179fe226b5afd1127b43fea5b2c43035a307913ec17767533
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/02/tickets-peque%C3%B1o.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/png
last-modified: Thu, 21 Feb 2019 15:07:39 GMT
etag: "05c6ebebb-0;;;"
accept-ranges: bytes
content-length: 100691
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/uploads/2020/01/FOTO.jpg
200 OK 155 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2020/01/FOTO.jpg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x960, components 3
- data
Size 155 kB (154903 bytes)
Hash 0801d8d0a465fa92780030733522d47f
951081e789e06f0c648ee739dc8cc8d697523a00
7043bd51d5d8fb22e69ff1794437f53fa21b520358c19ca3496e8f4fd01d7025
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2020/01/FOTO.jpg HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:48 GMT
content-type: image/jpeg
last-modified: Fri, 03 Jan 2020 21:02:42 GMT
etag: "05e0fabf2-0;;;"
accept-ranges: bytes
content-length: 154903
date: Mon, 11 Dec 2023 19:26:48 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/
200 OK 60 kB IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash 7bad1ad7b5f43af3312009df76464971
3f1c10568034435f11a53ed117ee7ceb8c81ca2c
b3f71b973733773c43f433b428dcfc6001c729d59f952e6cbad59acfb4f0d75f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ticketguatemala.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://ticketguatemala.com/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 19:26:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/
200 OK 22 kB IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash da53a6a99f554b58595dcd90a86357fe
38beab160d4d4f9d93069eeb60754a991af0767e
099d100b1afc219caaa979b772eb74663f56f5f227c8eff5ed4176b1ac471bed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ticketguatemala.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://ticketguatemala.com/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 19:26:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
200 OK 942 B URL GET HTTP/3 www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1236)
Hash 7a0e2f19c71eb75f6b5c57e1155555b2
c9db13716492bba360425166a3b7358eb0619f94
c71f213f7f76b11fefb3efd6e05d1c94664e9ba75779c43f111429138191be39
GET /maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: no-cache, must-revalidate
vary: Accept-Language, Origin, X-Origin, Referer
expires: Fri, 01 Jan 1990 00:00:00 GMT
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ytoayuc1YCbOv6lyUdA7OA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Mon, 11 Dec 2023 19:26:50 GMT
server: scaffolding on HTTPServer2
content-length: 942
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/wp-content/themes/ticket-guatemala/fonts/original_Quicksand-Medium.woff
200 OK 53 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/fonts/original_Quicksand-Medium.woff
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Web Open Font Format, TrueType, length 53204, version 3.0
- data
Hash 87d0c3df964429e486400ca045ccc9c8
4734dbec7450e7bea5953f9a10c051e53d28c4e6
b0653e8e6aa2af6dc2cf343895477a4e1999489f3f98b4c0a980eaf33eaef40f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/fonts/original_Quicksand-Medium.woff HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/wp-content/themes/ticket-guatemala/style.css?v=800
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff
last-modified: Wed, 20 Feb 2019 18:16:07 GMT
etag: "05c6d9967-0;;;"
accept-ranges: bytes
content-length: 53204
date: Mon, 11 Dec 2023 19:26:49 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/fonts/original_Ubuntu-B.woff
200 OK 113 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/fonts/original_Ubuntu-B.woff
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Web Open Font Format, TrueType, length 112672, version 0.80
- data
Size 113 kB (112672 bytes)
Hash ac90cca25174d0d1dabe34d12dd43512
7d5a057920f559c34a496efdebe5a53431381548
041cf81fdec4d8ab10648401ebf067e688442e2068c3b80bd93d96c1f282cdf4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/fonts/original_Ubuntu-B.woff HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/wp-content/themes/ticket-guatemala/style.css?v=800
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff
last-modified: Wed, 20 Feb 2019 18:16:21 GMT
etag: "05c6d9975-0;;;"
accept-ranges: bytes
content-length: 112672
date: Mon, 11 Dec 2023 19:26:49 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
200 OK 30 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 29752, version 1.0
- data
Hash ab1fc8621287e4ea9319a3136812cf80
fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3
7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ticketguatemala.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:34 GMT
expires: Fri, 06 Dec 2024 15:40:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
age: 359176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 28 kB URL GET HTTP/2 fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
- data
Hash 314d6364bbee6681d0b2364ee3555e2e
c5aab803abe36bf664d7b7e2a3731cd849337006
5a42c91e1ecc9b09346a1520d9a6f98074c13eebfb1cc87c4e82e5992beb685b
GET /s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ticketguatemala.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:50:36 GMT
expires: Fri, 06 Dec 2024 15:50:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:22:14 GMT
content-type: font/woff2
age: 358574
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 28 kB URL GET HTTP/2 fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
- data
Hash 314d6364bbee6681d0b2364ee3555e2e
c5aab803abe36bf664d7b7e2a3731cd849337006
5a42c91e1ecc9b09346a1520d9a6f98074c13eebfb1cc87c4e82e5992beb685b
GET /s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ticketguatemala.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:50:36 GMT
expires: Fri, 06 Dec 2024 15:50:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:22:14 GMT
content-type: font/woff2
age: 358574
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-R7FC3EL2MJ&l=dataLayer&cx=c
200 OK 80 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-R7FC3EL2MJ&l=dataLayer&cx=c
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4179)
Hash 9ced33b68c0fddd3b8414641734a09f0
71ca7481c1b671a56b62c7133524fe78cdf6e720
a8568db8242a2e1f552e6fbe4d9a30cfa63d49b574b90ee3c4977a582de92f54
GET /gtag/js?id=G-R7FC3EL2MJ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 19:26:50 GMT
expires: Mon, 11 Dec 2023 19:26:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79461
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/wp-content/uploads/2019/02/nuestros-clientes-1.png?id=119
200 OK 448 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/02/nuestros-clientes-1.png?id=119
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 1461 x 255, 8-bit/color RGBA, non-interlaced
- data
Size 448 kB (448454 bytes)
Hash 65e37c345ba1965e7dfc2124054c183d
891267f0be170be10d068143018d0bfa42c1d6cb
bee9e8b08ff7bc6d09da6691c8d4389d027cc6536de8694077462b284f35fa0c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/02/nuestros-clientes-1.png?id=119 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: image/png
last-modified: Thu, 21 Feb 2019 20:14:42 GMT
etag: "05c6f06b2-0;;;"
accept-ranges: bytes
content-length: 448454
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-json/contact-form-7/v1/contact-forms/138/feedback/schema
200 OK 240 B URL GET HTTP/3 ticketguatemala.com/wp-json/contact-form-7/v1/contact-forms/138/feedback/schema
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type JSON data
- , ASCII text, with very long lines (611), with no line terminators
Hash 249fa3d29727fd3bf272471abad69fb0
455477cc15bf02bd301c76482a94dd799b1efd1a
42c7ad2236007476c8e3d0852c7b2a66f44419bc07801c123d5b3b8f148edea4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-json/contact-form-7/v1/contact-forms/138/feedback/schema HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ticketguatemala.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-powered-by: PHP/7.4.33
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://ticketguatemala.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin,Accept-Encoding
content-length: 240
content-encoding: br
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
ticketguatemala.com/wp-content/uploads/2019/03/slider5.png
200 OK 304 kB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/03/slider5.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 1462 x 750, 8-bit colormap, non-interlaced
- data
Size 304 kB (304185 bytes)
Hash 82cc9ec3977b19b78e22c890be4f4c39
3057ea77d33267ccce2ab4f4f390f8b539ac4a66
9d7afef74be90c83348af593d5dd0728f4c5fbfdb166563d353f1bb63f2ad14a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/03/slider5.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 21:59:16 GMT
etag: "05c8042b4-0;;;"
accept-ranges: bytes
content-length: 304185
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ajax-loader.gif
200 OK 4.2 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ajax-loader.gif
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type GIF image data, version 89a, 32 x 32
- data
Hash c5cd7f5300576ab4c88202b42f6ded62
7a1aa43614396382bb15e5fde574d9cdcd21698f
e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ajax-loader.gif HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/slick.min.css?ver=3.16.16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: image/gif
last-modified: Mon, 28 Aug 2017 10:36:16 GMT
etag: "059a3f220-0;;;"
accept-ranges: bytes
content-length: 4178
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
200 OK 63 kB URL GET HTTP/3 maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (2491)
Hash 1986045882effca1000f8ed1d5ac50a1
53d5245fa6457872ba18437e057aba4ac317fd6f
7dafa30470d19392310f5fdfb58e02737cb9b21d676c1f76119daef6e3353507
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 11 Dec 2023 19:26:50 GMT
server: scaffolding on HTTPServer2
content-length: 63102
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/css/fonts/ult-silk.woff
200 OK 2.5 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/css/fonts/ult-silk.woff
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Web Open Font Format, CFF, length 2504, version 1.0
- data
Hash 520b95f60ddfa6a5ab689c1e2a8c476b
82eae4339865914297c9e5d5174906350f31ee9b
8641a749b56f41be6413bb213410f8e3d3f5056211cfe3e3c8c294a3dbbfddce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/Ultimate_VC_Addons/assets/css/fonts/ult-silk.woff HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/wp-content/plugins/Ultimate_VC_Addons/assets/css/icons.css?ver=3.16.16
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff
last-modified: Mon, 28 Aug 2017 10:36:16 GMT
etag: "059a3f220-0;;;"
accept-ranges: bytes
content-length: 2504
date: Mon, 11 Dec 2023 19:26:50 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
200 OK 23 B URL GET HTTP/3 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 11 Dec 2023 19:26:50 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.gstatic.com/maps-api-v3/embed/js/55/4/init_embed.js
200 OK 61 kB URL GET HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/55/4/init_embed.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (3246)
Hash e5f346e72fb065c353010d0d8076499e
53bbae9cada660daf922ca2010fcf65bb3a3bf76
91c517b650261a41b75a3dff1ba8d77ab069db61b32df2cd470bc3bfad5409ce
GET /maps-api-v3/embed/js/55/4/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 61041
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 10 Dec 2023 12:53:46 GMT
expires: Mon, 09 Dec 2024 12:53:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:19 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 109984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maps.googleapis.com/maps-api-v3/api/js/55/4/common.js
200 OK 58 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/4/common.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (6638)
Hash 2f1f93a50ec0f20d9429cd4486075cd9
7e899396ac3541ac2ce40993a60cb3ef15ea4e6f
969dace001ef24f99f38bd00c5578b85ba9368e77a5667cfcaeaa29d2f57657b
GET /maps-api-v3/api/js/55/4/common.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57512
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 19:31:37 GMT
expires: Thu, 05 Dec 2024 19:31:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:43 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 431713
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/
200 OK 30 kB IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
Hash 3c368410d4544fd7166bf7ecef29604a
d6c8d274dc52cc2d5767b6cb39a08637714fd9de
9808ec00a8d7776e4adf897463b28a10ffb3fe7807d03c9b4261b41fa0b3eb92
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ticketguatemala.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://ticketguatemala.com/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 19:26:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
maps.googleapis.com/maps-api-v3/api/js/55/4/util.js
200 OK 55 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/4/util.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (562)
Hash 3aecc4da8982cd3ee2c71448592b54bd
2af800db00e7fe620d1a3828420c8d866ebd579c
e759dc710ec6d9f9438d5a77f834b247254512fb90cf520764ab591db32cf5cb
GET /maps-api-v3/api/js/55/4/util.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 55175
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:16 GMT
expires: Fri, 06 Dec 2024 15:40:16 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:43 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 359194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
200 OK 205 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (568)
Size 205 kB (204921 bytes)
Hash af51eb6ced1afe3f0f11ee679198808c
02b9d6a7a54f930807a01ae3cdcf462862925b40
6788908efcff931e3c0c4fb54a255932414a22e81971dcc1427c8a4f459a1fbf
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ticketguatemala.com
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204921
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 09 Dec 2023 21:16:49 GMT
expires: Sun, 08 Dec 2024 21:16:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 166201
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ticketguatemala.com/wp-content/themes/ticket-guatemala/favicon/favicon-16x16.png
200 OK 1.4 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/favicon/favicon-16x16.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
- data
Hash 74fe61acd368d9576f0ea69db31e51ab
9a6142a0af11daf8b393fbb1eeddbc41c15b88e1
bb2b1fab1dd7ae3ecbe83ef0d4a1ce2ab813f648d0f79aec786533f5939196a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/favicon/favicon-16x16.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 18:31:13 GMT
etag: "05c8011f1-0;;;"
accept-ranges: bytes
content-length: 1398
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.5
200 OK 6.7 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.5
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (29149), with CRLF, CR line terminators
Hash 64bd86b1ce810d65855c3a109560fd7c
515936eb400c632fc49d975d00c88b9a7b57ae22
de34850653caab875f9e46ee46c3ba707fb6839665d315ea1a90455383d93360
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.5 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6657
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/themes/ticket-guatemala/favicon/android-icon-192x192.png
200 OK 13 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/favicon/android-icon-192x192.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
- data
Hash 38d74031884d30824da31f6411e1fe39
5563eae9ea94643c60ac4faf87f440d26a06ada6
5c4a70fbd52dc958b7061cec684c26675e6540b05c8ec2786c9f29bf435c187e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/favicon/android-icon-192x192.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: image/png
last-modified: Wed, 06 Mar 2019 18:31:09 GMT
etag: "05c8011ed-0;;;"
accept-ranges: bytes
content-length: 13054
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.5
200 OK 2.4 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.5
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (8049), with CRLF, CR line terminators
Hash daa7bcc60dc33841f42b33d1202de9c4
3de6b1b36be9fe36b791ace097e33eab4f621cea
a9cfafd7adf794d8c289fc1c84a37edcc93850ca7eea80ed283e4ac8d8ead4b5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.5 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2404
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.5
200 OK 14 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.5
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (55747), with CRLF, CR line terminators
Hash eb5e186ce29288630ce0716e1036aa93
ff37a6dc29a6c1c74ec67ca0f55fe327d26da278
6b19dbd4a8065d203fbc8f1c6f83bfcfcf181a2e43aeda2599eb70b3d0e050a5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.5 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13836
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.5
200 OK 6.7 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.5
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type ASCII text, with very long lines (25862), with CRLF, CR line terminators
Hash 1882b2cf47d04905889dbdb7903ed023
eda2c886e64854263f9072dd07c35a9516c82fe9
d3dfa5802adf9630b7c4bd2f637628f436cffb56eca632b12f7811caa0f8cc76
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.5 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6683
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
maps.googleapis.com/maps-api-v3/api/js/55/4/overlay.js
200 OK 1.3 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/4/overlay.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (1152)
Hash d1290de5da8a835304b6f7206d907119
53960cc38980f6c3c96308c205713bf2a8afab41
88e2d34a2ecd255e7c30d9436d1f8f7156973f2badc72161da7f3c1901ae5bec
GET /maps-api-v3/api/js/55/4/overlay.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 1273
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:29 GMT
expires: Fri, 06 Dec 2024 15:40:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:43 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 359181
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/4/onion.js
200 OK 8.9 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/4/onion.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (2559)
Hash 86a8ef66f5412b1da4106dfffbc074bd
fa74c571ebb7bb185cc60075edfccc3f8c13e74c
f192fc1904ff65df2e882e7cb7afa1432a424adeecefeb081c53c4fde85be8fe
GET /maps-api-v3/api/js/55/4/onion.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 8900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Dec 2023 14:46:38 GMT
expires: Sat, 07 Dec 2024 14:46:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:43 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 276012
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/4/search_impl.js
200 OK 1.3 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/4/search_impl.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (1470)
Hash 2518ef679c2d0c0c0758a3f97795e60d
260f8b57aa076ecd6092d7d80f5fd9bfe838d20d
c15a24cfd927f84920b607b2764a5f7fde792140f08c64ea3808eec291b6d038
GET /maps-api-v3/api/js/55/4/search_impl.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 1253
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 19:31:41 GMT
expires: Thu, 05 Dec 2024 19:31:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:43 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 431709
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/wp-content/uploads/2019/02/fondo-evento.png
200 OK 1.9 MB URL GET HTTP/3 ticketguatemala.com/wp-content/uploads/2019/02/fondo-evento.png
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type PNG image data, 1460 x 1198, 8-bit/color RGBA, non-interlaced
- data
Size 1.9 MB (1912088 bytes)
Hash 426d1d4c66eae81275eec328118f032e
984f7d464a0615b2131baeda84da4af02a9db43c
6b56afc0d310af8bc41dbcf63ebc88499e0e782ca9974949d553ba96663d5719
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2019/02/fondo-evento.png HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=1333600, public
expires: Mon, 18 Dec 2023 19:26:50 GMT
content-type: image/png
last-modified: Thu, 21 Feb 2019 19:34:46 GMT
etag: "05c6efd56-0;;;"
accept-ranges: bytes
content-length: 1912088
date: Mon, 11 Dec 2023 19:26:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 09 Dec 2023 15:46:53 GMT
expires: Sun, 08 Dec 2024 15:46:53 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/css
vary: Accept-Encoding
age: 185997
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
200 OK 205 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (568)
Size 205 kB (204921 bytes)
Hash af51eb6ced1afe3f0f11ee679198808c
02b9d6a7a54f930807a01ae3cdcf462862925b40
6788908efcff931e3c0c4fb54a255932414a22e81971dcc1427c8a4f459a1fbf
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204921
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 09 Dec 2023 21:16:49 GMT
expires: Sun, 08 Dec 2024 21:16:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 166201
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i1041818&2i1924248&2e1&3u14&4m2&1u540&2u465&5m5&1e0&5sen-US&6sus&10b1&12b1&client=google-maps-embed&token=32976
200 OK 83 kB URL GET HTTP/3 maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i1041818&2i1924248&2e1&3u14&4m2&1u540&2u465&5m5&1e0&5sen-US&6sus&10b1&12b1&client=google-maps-embed&token=32976
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type PNG image data, 540 x 465, 8-bit colormap, non-interlaced
- data
Hash 642ab00163fc8b4897ceeae6e0370d59
0f98226faa5fef9fdd1a89b910f35fe3a230240f
3d5607a1b335a959a09282c2cec4147f90bb675208218edd8d0cee6550cd9497
GET /maps/api/js/StaticMapService.GetMapImage?1m2&1i1041818&2i1924248&2e1&3u14&4m2&1u540&2u465&5m5&1e0&5sen-US&6sus&10b1&12b1&client=google-maps-embed&token=32976 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Mon, 11 Dec 2023 19:26:51 GMT
expires: Tue, 12 Dec 2023 19:26:51 GMT
cache-control: public, max-age=86400
server: scaffolding on HTTPServer2
content-length: 82645
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=301
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:54:46 GMT
expires: Fri, 06 Dec 2024 15:54:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 358325
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:43:10 GMT
expires: Fri, 06 Dec 2024 15:43:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 359021
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js
200 OK 6.8 kB URL GET HTTP/3 www.google.com/js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with very long lines (17029), with no line terminators
Hash e2dcaf4318d1ca9ee630eb93804fa2a2
beaa685908e1b17cac2f3268025a349e64dbc44a
94410ce192c32c5baf01356f727c60948f022ef2eb49ce812eded47bfb9ad523
GET /js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 6830
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Dec 2023 04:44:25 GMT
expires: Sat, 07 Dec 2024 04:44:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 312146
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 16:21:15 GMT
expires: Thu, 14 Dec 2023 16:21:15 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 356736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
200 OK 7.5 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format, TrueType, length 7536, version 1.0
- data
Hash 04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204921
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 09 Dec 2023 21:16:49 GMT
expires: Sun, 08 Dec 2024 21:16:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 166202
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/wp-content/themes/ticket-guatemala/fonts/original_Quicksand-Regular.woff
200 OK 53 kB URL GET HTTP/3 ticketguatemala.com/wp-content/themes/ticket-guatemala/fonts/original_Quicksand-Regular.woff
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Web Open Font Format, TrueType, length 53356, version 3.0
- data
Hash 35351db8561a2779041e7308df5ded2e
209932a5aef1520d1e249b41a2c065c3e4b5e387
56ce75475c88ce0dad4d52edc8e2dea31ff134a2632ba69deef8508319c9067d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/ticket-guatemala/fonts/original_Quicksand-Regular.woff HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/wp-content/themes/ticket-guatemala/style.css?v=800
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: font/woff
last-modified: Wed, 20 Feb 2019 18:16:13 GMT
etag: "05c6d996d-0;;;"
accept-ranges: bytes
content-length: 53356
date: Mon, 11 Dec 2023 19:26:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
www.google.com/recaptcha/api.js?render=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&ver=3.0
200 OK 884 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&ver=3.0
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint50:3E:DA:12:EC:7F:39:A5:E9:4F:16:D7:D6:AA:BF:45:15:44:7F:E9
ValidityMon, 20 Nov 2023 08:09:47 GMT - Mon, 12 Feb 2024 08:09:46 GMT
File type ASCII text, with very long lines (884), with no line terminators
Hash 1ccf67a7d4c97aae8bf4c22c2dcdc6ff
590b875933936c6487d38b541b4985bf710e30ff
da4907c9bd4f39f86f8cfc137f34aa08a417001fd2299d304747e85dc112ccd5
GET /recaptcha/api.js?render=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 11 Dec 2023 19:26:48 GMT
date: Mon, 11 Dec 2023 19:26:48 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Ubuntu:700%7CQuicksand:400%2C500%7CRoboto:500
200 OK 6.1 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Ubuntu:700%7CQuicksand:400%2C500%7CRoboto:500
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (6296), with no line terminators
Hash c586a809f61f39a620fab5f7a7a9bdab
602f1e291081294362d7fb3b5ec1294c1fc58430
570755ae1c6506e4a0c744255c9cf54579501adcb6d9de72b4c02d8ac29dc765
GET /css?family=Ubuntu:700%7CQuicksand:400%2C500%7CRoboto:500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 11 Dec 2023 19:26:48 GMT
date: Mon, 11 Dec 2023 19:26:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with no line terminators
Hash e985f667e666ad879364d2e1c20a02dc
4e896e0f0268c2d6565798a87665eb0084f23d41
153667004611f8905f074b17b69c32f43b8038f0d95d1341d00a88e48f990a6d
GET /recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Mon, 11 Dec 2023 19:26:51 GMT
date: Mon, 11 Dec 2023 19:26:51 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ticketguatemala.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
200 OK 7.5 kB URL GET HTTP/3 ticketguatemala.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subjectticketguatemala.com
FingerprintA2:69:02:8C:AD:D8:31:67:27:26:EF:8F:BD:94:E1:7C:69:DC:CC:EF
ValidityMon, 27 Nov 2023 19:11:45 GMT - Sun, 25 Feb 2024 19:11:44 GMT
File type Web Open Font Format, TrueType, length 7536, version 1.0
- data
Hash 04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1
Host: ticketguatemala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.5.1
Cookie: _ga_R7FC3EL2MJ=GS1.1.1702322810.1.0.1702322810.0.0.0; _ga=GA1.1.1327333376.1702322811
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: font/woff
last-modified: Thu, 19 Oct 2017 23:18:18 GMT
etag: "059e932ba-0;;;"
accept-ranges: bytes
content-length: 7536
date: Mon, 11 Dec 2023 19:26:51 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ticketguatemala.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:57:09 GMT
expires: Fri, 06 Dec 2024 15:57:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 358180
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
200 OK 42 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
IP
Requested by https://ticketguatemala.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (33195)
Hash bf339557a4d7876ff2fb7754f162f171
51572f3e2dc4a6f2f608e9c6811515802534224c
48b5a8378461050c6a7987e98619829154f76f16b6574dcf5906f5d282f3b473
GET /recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ticketguatemala.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 11 Dec 2023 19:26:50 GMT
content-security-policy: script-src 'nonce-5c1A-zQHeWKjlr6vg1J-Sg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.bpo361.com/wp-content/themes/handcrafted-wp-theme-master/images/logoApkana.svg
200 OK 262 kB URL GET HTTP/2 www.bpo361.com/wp-content/themes/handcrafted-wp-theme-master/images/logoApkana.svg
IP
Requested by https://ticketguatemala.com/
Certificate IssuerLet's Encrypt
Subject*.bpo361.com
FingerprintFD:12:27:57:43:38:6F:34:B0:B5:CD:11:D7:30:86:AB:34:01:7B:46
ValidityMon, 23 Oct 2023 03:41:54 GMT - Sun, 21 Jan 2024 03:41:53 GMT
File type SVG Scalable Vector Graphics image
- SVG XML document
- XML 1.0 document text
- SVG XML document
- XML document text
- exported SGML document text
- exported SGML document, ASCII text
Size 262 kB (262331 bytes)
Hash b3c73f4d9434fd6ea029b4bc652c5a84
61b1ce3d90d9487b7ca1700642a0cc031936d7eb
55964bad835d2c27a9393db0db159439893c2375a5c07d13c0ec3baa076f08d4
GET /wp-content/themes/handcrafted-wp-theme-master/images/logoApkana.svg HTTP/1.1
Host: www.bpo361.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 19:26:41 GMT
content-type: image/svg+xml
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 10 Jun 2022 02:58:02 GMT
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: HIT
content-encoding: gzip
x-cdn-cache-status: REVALIDATED
x-via: FRA1
X-Firefox-Spdy: h2
maps.googleapis.com/maps-api-v3/api/js/55/4/map.js
200 OK 73 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/4/map.js
IP
Requested by https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15439.856761995972!2d-90.56565376371276!3d14.657973695636485!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x8589a1d7b63c9157%3A0xe0639e408f79cffb!2sZona+4+de+Mixco%2C+Guatemala!5e0!3m2!1ses!2sgt!4v1551282766790
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (2312)
Hash 86808d6e775e7ab077eadd3952b9769a
1c7d8a35e618e143952d5bfe8900788b1b95fe34
0cf6d91acfbd231daa3ccf96e67596a75ea04458209786b2814f13a7f14fbf6c
GET /maps-api-v3/api/js/55/4/map.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 23771
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 19:31:41 GMT
expires: Thu, 05 Dec 2024 19:31:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 22:55:43 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 431709
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/reload?k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8
200 OK 13 kB URL POST HTTP/3 www.google.com/recaptcha/api2/reload?k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with very long lines (13154)
Hash 55a579d437864b2b1b246ae14889e251
ced73da8906dd05f74445e7f27e6cdfd27ed5c5a
dd1846189077ed83e2b66b249a49f9d2de7146769fc587512ed0125fa88f28db
POST /recaptcha/api2/reload?k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 8817
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf9vuYgAAAAADK-TRm3lkLRHvE9Cly_ywYIFlA8&co=aHR0cHM6Ly90aWNrZXRndWF0ZW1hbGEuY29tOjQ0Mw..&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=hxs5rkyhopuv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Mon, 11 Dec 2023 19:26:52 GMT
expires: Mon, 11 Dec 2023 19:26:52 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09APfP6pVbaWSR9rVq_VsZik0HA8LFUGd3u5-rbErrc2JOQKI2WBGrIZte6qsxwp2gt7Tc34yKfus89pcbQUjew6A;Path=/recaptcha;Expires=Sat, 08-Jun-2024 19:26:52 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
69.175.102.130
185.151.30.195
0.0.0.0