Report - bloxholder.com/

Report Overview

Submitted URL
bloxholder.com/
IP
162.213.255.94
ASN
#22612 NAMECHEAP-NET
Submitted
2022-12-02 08:37:16
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.162.125.72
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.33.119.27
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
ocsp.sectigo.com	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	340 B	963 B	104.18.32.68
bloxholder.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	16 kB	2.0 MB	162.213.255.94
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	56 kB	34.120.237.76
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-02	medium	bloxholder.com/	Malware
2022-12-02	medium	bloxholder.com/	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/jquery/jquery-migrate.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/jquery/jquery.cookie.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/featherlight.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/js.cookie.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/cart-fragments.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/pep.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/header-cart.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/footer.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/hoverIntent.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/maxmegamenu.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/helper.js	Malware
2022-12-02	medium	bloxholder.com/assets/scripts/jquery/jquery.min.js	Malware
2022-12-02	medium	bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-regular.woff2	Malware
2022-12-02	medium	bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-600.woff2	Malware
2022-12-02	medium	bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-300.woff2	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	bloxholder.com/assets/scripts/js.cookie.min.js	1.8 kB	2023-03-07	2024-05-10
Pretty URL bloxholder.com/assets/scripts/js.cookie.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-05-10 23:57:06 Times Seen21736 Hash d0a6d8547c66b0d7b0172466558d1208 ff93916519c7b9483251f609e4d29f38c30a66e3 3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612 Loading...

	bloxholder.com/assets/scripts/navigation.min.js	3.0 kB	2023-03-08	2024-01-27
Pretty URL bloxholder.com/assets/scripts/navigation.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:34:14 Last Seen2024-01-27 05:17:44 Times Seen30 Hash c0b59b0c5b0cc3992035dc1ceb8a9b54 38048ed6025480c9310f4f0a51a38f6e58dda49c 1137588b677be7fbc3c1a05a0a60c426d5f3f5ebfaa3b114109d62c64def075f Loading...

	bloxholder.com/assets/scripts/helper.js	342 B	2023-03-07	2023-07-20
Pretty URL bloxholder.com/assets/scripts/helper.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:49:58 Last Seen2023-07-20 18:30:34 Times Seen10 Hash f34a48817a416efbbf84a35933b7e1f0 6713a2ec52acae6e4f50620f19a2e2b70b347102 e2bd248dbfd483d2f8d47e0d50f2e0209570119c01a647173de98224b99e6c49 Loading...

	bloxholder.com/assets/scripts/pep.min.js	18 kB	2023-03-07	2024-05-09
Pretty URL bloxholder.com/assets/scripts/pep.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:53 Last Seen2024-05-09 05:45:41 Times Seen211 Hash 17e609c1a0e26d6a24eb600ff4925de1 c0e7e2cde57cb587aa6ee37ee745fb5aadb0c86c d952e41a5ec72320f1e8660af9dc65a2a043467bc5a8d57b69422e740cc0b8b9 Loading...

	bloxholder.com/assets/scripts/jquery/jquery.min.js	90 kB	2023-03-07	2024-05-10
Pretty URL bloxholder.com/assets/scripts/jquery/jquery.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-10 21:46:47 Times Seen32124 Hash 02dd5d04add4759122013c5ab4dc5cc2 a45a56e396ac549b4ff39b696ce9e0c16a7612de bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea Loading...

	bloxholder.com/assets/scripts/header-cart.min.js	531 B	2023-03-07	2024-05-09
Pretty URL bloxholder.com/assets/scripts/header-cart.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:53 Last Seen2024-05-09 05:45:40 Times Seen340 Hash c51a7c1a02adeefbc4f233686e0f19d3 9181045e9d2ac100139fefe71111636dbd9a5e09 2875bdd16c004407f9f3190e3983384de61a9f37bf360600c963853a1595d56a Loading...

	bloxholder.com/assets/scripts/footer.min.js	745 B	2023-03-08	2024-05-06
Pretty URL bloxholder.com/assets/scripts/footer.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 08:27:07 Last Seen2024-05-06 09:07:52 Times Seen74 Hash 5d78e84012bd8a93ac2c0e9e53f8e4f6 7cbd18032bc43072bc515902d64dbf2b5da32760 1cec602b4a6c5b65bf7951b61b97a00dc2fb654e31144002e91f66d2004f9086 Loading...

	bloxholder.com/assets/scripts/cart-fragments.min.js	2.9 kB	2023-03-07	2024-05-10
Pretty URL bloxholder.com/assets/scripts/cart-fragments.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-05-10 23:57:06 Times Seen14055 Hash 0fd625c3991a4015814cffdc88e2fc82 d7c2f53e058210ff3ea773297641008bab71a5f3 2d022db650d194d935faea46a40e5512235b43bc3f8b181e32ce6d3dd745f4e1 Loading...

	bloxholder.com/	99 B	2023-03-07	2024-05-09
Pretty URL bloxholder.com/ IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:31 Last Seen2024-05-09 11:34:01 Times Seen76 Hash 33f9973cb87038eea67113f18acefe81 4336f805f21e02619eb7ef68ce4e9adcdfce905c 02524b160ec3732b8debe9234df656b9c28c152bd180c20401ea1d7d4655151a Loading...

	bloxholder.com/assets/scripts/jquery/jquery-migrate.min.js	11 kB	2023-03-07	2024-05-11
Pretty URL bloxholder.com/assets/scripts/jquery/jquery-migrate.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-11 01:26:12 Times Seen69213 Hash 79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300 Loading...

	unknown	0 B	2023-03-07	2024-05-11
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-11 03:39:59 Times Seen37534299 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	bloxholder.com/assets/scripts/hoverIntent.min.js	1.5 kB	2023-03-07	2024-05-11
Pretty URL bloxholder.com/assets/scripts/hoverIntent.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:10 Last Seen2024-05-11 00:45:15 Times Seen27668 Hash 8c0498e2f1f7a684a8d2a3feb934b64b 76099689ccaee466d4608da621c403b368dcae03 ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40 Loading...

	bloxholder.com/	52 B	2023-03-07	2024-05-09
Pretty URL bloxholder.com/ IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:04 Last Seen2024-05-09 22:31:02 Times Seen768 Hash 44c7929ee3020ea543689684e3226d26 b59c087c439641b817de0cd668afb830312684a9 33ae4bbe0ff019c6aa55b6e33f1a0afa06f7c8af6acfa8bac6c1f25c05bc2cd5 Loading...

	bloxholder.com/assets/scripts/maxmegamenu.js	20 kB	2023-03-07	2024-03-17
Pretty URL bloxholder.com/assets/scripts/maxmegamenu.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:56:40 Last Seen2024-03-17 15:19:39 Times Seen17 Hash 9b01b1668d36eda37081f4ff84679d8b 34e995a1f8de3efbe94ded4686c4c89611e9c859 0c2d44d4ef3f14eefd935acbc3a3a1b8ee462693c9bbbd96eca177b95fd98032 Loading...

	bloxholder.com/assets/scripts/jquery/jquery.cookie.min.js	1.4 kB	2023-03-07	2024-05-08
Pretty URL bloxholder.com/assets/scripts/jquery/jquery.cookie.min.js IP 162.213.255.94 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:36 Last Seen2024-05-08 21:06:35 Times Seen271 Hash 4f8f624a1f37ded882a2e982a07ece34 b1adadacb1a2120b1579e731115f003c91167823 6407a9ffc16173f1d3330525f44a332501d2ed672cf276371a6c5ce2c4b9ea1e Loading...

HTTP Transactions (60)

URL IP Response Size

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6666
Expires: Fri, 02 Dec 2022 10:28:11 GMT
Date: Fri, 02 Dec 2022 08:37:05 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5946
Expires: Fri, 02 Dec 2022 10:16:11 GMT
Date: Fri, 02 Dec 2022 08:37:05 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3303
Cache-Control: max-age=96550
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:37:05 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:26:15 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 1odk39HOqvx1qt5CS/sWzgmjtQAu/TDgKYtsZm8MGyqzVYi1PYw/wFWAbAyWd6wv+27rj/mqO4E=
x-amz-request-id: CTYFG9QRNZVTN63X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 07:46:01 GMT
age: 3064
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 08:19:54 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1031
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:37:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

bloxholder.com/

162.213.255.94

301 Moved Permanently

707 B

URL HTTP/1.1
bloxholder.com/
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
707 B (707 bytes)
Hash
1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Fri, 02 Dec 2022 08:37:05 GMT
server: LiteSpeed
location: https://bloxholder.com/
x-turbo-charged-by: LiteSpeed

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 08:08:57 GMT
cache-control: public,max-age=3600
age: 1688
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
56da82d347be0b41d4db06b1cd63f8b9
d4b886f6026082d72cb6841a95172a5859a61560
de87555a3565ed37b7c6ec18bf1c70962ca3d82b91bd7577fb63940cbeb3f39c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:37:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 02:37:38 GMT
Expires: Fri, 09 Dec 2022 02:37:37 GMT
Etag: "d4b886f6026082d72cb6841a95172a5859a61560"
Cache-Control: max-age=582630,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7732bd18e871b517-OSL

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3302
Cache-Control: max-age=91485
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:37:06 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:01:51 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

bloxholder.com/

162.213.255.94

200 OK

4.6 kB

URL HTTP/2
bloxholder.com/
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text Nim source code, Unicode text, UTF-8 text, with very long lines (490), with CRLF, LF line terminators
Size
4.6 kB (4649 bytes)
Hash
f06ade87a5b138aeee859a5013ebf94e
9405683c05c98259f41254f5d29ca65f0fe10604
beaa1bf8e6b469a45fd6d1a64bca6b24de1452796f608639585060160cc4efbb

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
x-powered-by: PHP/7.2.34
content-type: text/html; charset=UTF-8
content-length: 4649
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

push.services.mozilla.com/

35.162.125.72

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.162.125.72:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mjGUwCX625I+i+VEk6kBMg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: h4Pm7Itx5XtdTr98Vx/Ecndtzno=

bloxholder.com/assets/styles/wp-block-library-theme-inline.css

162.213.255.94

200 OK

598 B

URL HTTP/2
bloxholder.com/assets/styles/wp-block-library-theme-inline.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (2501), with no line terminators
Size
598 B (598 bytes)
Hash
13f5f270c76a540e8112f77b98096c9a
8e1879f8b70bac1209bc34d27bbe1c146c26dc03
29141499ff3e2a98d81f91fff4b9ecf06df6d7767968854ad5f160d49b19e24c

HTTP Headers

GET /assets/styles/wp-block-library-theme-inline.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 14:39:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 598
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/wc-blocks-vendors-style.css

162.213.255.94

200 OK

1.1 kB

URL HTTP/2
bloxholder.com/assets/styles/wc-blocks-vendors-style.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (4933), with no line terminators
Size
1.1 kB (1109 bytes)
Hash
8f2da34c6f082c7bec00f9cca661fd59
d0de5b6b29a9788a64826b833465a9d08f7c2ab7
d461fea6636b26aab698f636b2518709cb79416c7d3916d6b03497c4d75befdd

HTTP Headers

GET /assets/styles/wc-blocks-vendors-style.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sat, 18 Jun 2022 15:07:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1109
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/wc-blocks-style.css

162.213.255.94

200 OK

22 kB

URL HTTP/2
bloxholder.com/assets/styles/wc-blocks-style.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Size
22 kB (21638 bytes)
Hash
39646871cf12e418a6e127f350a8c217
56215d16bdf73aca16f79207ebf7a6762c458de5
03255bea40ecfd57658b06afe7475b9c76c322b52f318a7d4c5b69462c3372d9

HTTP Headers

GET /assets/styles/wc-blocks-style.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sat, 18 Jun 2022 15:07:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21638
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/gutenberg-blocks.css

162.213.255.94

200 OK

3.3 kB

URL HTTP/2
bloxholder.com/assets/styles/gutenberg-blocks.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (43256), with no line terminators
Size
3.3 kB (3298 bytes)
Hash
704518f72435ac5dfd60d715330abd02
829d2a0a632fae66452f0beb2e5974b68ea9fd32
8b3a0538950b943b8e0d9b75826518f7ca9610bbc21ebef1cd70e4c56b7475a2

HTTP Headers

GET /assets/styles/gutenberg-blocks.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sat, 18 Jun 2022 15:07:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3298
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/storefront-gutenberg-blocks-inline.css

162.213.255.94

200 OK

568 B

URL HTTP/2
bloxholder.com/assets/styles/storefront-gutenberg-blocks-inline.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with CRLF line terminators
Size
568 B (568 bytes)
Hash
97603276888564b16edd47050ea9ae8d
ce4c7d91bc6352e8f589aeff1a3becc8533f29ee
6c04d84483b7272b3957f78805419e3bc26ac2e54fda14092b94a9a3faf8fad8

HTTP Headers

GET /assets/styles/storefront-gutenberg-blocks-inline.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 14:31:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 568
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/global-styles-inline.css

162.213.255.94

200 OK

1.1 kB

URL HTTP/2
bloxholder.com/assets/styles/global-styles-inline.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (8121), with no line terminators
Size
1.1 kB (1120 bytes)
Hash
edd01562b26f8f1628c2c4b35c3713a2
e77b7e86f764d65ab088ddbcd63bc814aad9590d
dccbbba4b9e6b702cca605db6c6e64929a01b64d637a52886ad13ab88d9cfe26

HTTP Headers

GET /assets/styles/global-styles-inline.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 14:33:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1120
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/cw-coinfont.css

162.213.255.94

200 OK

1.1 kB

URL HTTP/2
bloxholder.com/assets/styles/cw-coinfont.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (9586), with no line terminators
Size
1.1 kB (1065 bytes)
Hash
6a2dd0b4d9cf5ea352aa93facd7f7981
1d06294e86b8035985b6ff7e8728cc7458b75dc2
dbd1276c2e0bc5f02073c515cc9a65bc534ee9920373d320bd598d70cdb8e0d8

HTTP Headers

GET /assets/styles/cw-coinfont.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sat, 18 Jun 2022 15:08:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1065
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/style.css

162.213.255.94

200 OK

7.0 kB

URL HTTP/2
bloxholder.com/assets/styles/style.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (37551)
Size
7.0 kB (7004 bytes)
Hash
899c8540b43a3f06c8788f06e4574088
e3b4aba30f017843916cbe3e258cb646b5c14636
5853af3032995a8158321104a8632b1607b118f7b8a06cae240cfcf466a01f57

HTTP Headers

GET /assets/styles/style.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 20:48:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7004
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/dashicons.min.css

162.213.255.94

200 OK

35 kB

URL HTTP/2
bloxholder.com/assets/styles/dashicons.min.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (58981)
Size
35 kB (35110 bytes)
Hash
54c5bfb8a890d87139d9abfe01662c83
f9eddf5b8a3269e6d6fa40b4f13083705e6267c6
9685e5cabe4efc8c85e986725af8009b306416aad3ecc9086ca5bb12b84ce4ef

HTTP Headers

GET /assets/styles/dashicons.min.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sat, 18 Jun 2022 15:08:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 35110
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/styles.min.css

162.213.255.94

200 OK

3.4 kB

URL HTTP/2
bloxholder.com/assets/styles/styles.min.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (18154)
Size
3.4 kB (3387 bytes)
Hash
6c869a5281b7da78311b54496d61cf38
c15c758da6db348d899511acc9ff7c9fd4395898
62c6bb8a10bb892decf9017bb3278a6a9745175c89faa461f66f129b76b35171

HTTP Headers

GET /assets/styles/styles.min.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Thu, 23 Jun 2022 19:14:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3387
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/storefront-style-inline.css

162.213.255.94

200 OK

901 B

URL HTTP/2
bloxholder.com/assets/styles/storefront-style-inline.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with CRLF line terminators
Size
901 B (901 bytes)
Hash
79b8b2e6230e738a965d1036cc023912
5bb533037dc1539cefec8a0b16c1431a0793a372
b97bb405636e062512dbda7c7a2f471df7f5b0c1d00a4927b15233424568a296

HTTP Headers

GET /assets/styles/storefront-style-inline.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 14:34:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 901
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/jquery/jquery-migrate.min.js

162.213.255.94

200 OK

4.0 kB

URL HTTP/2
bloxholder.com/assets/scripts/jquery/jquery-migrate.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (11126)
Size
4.0 kB (3995 bytes)
Hash
7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/jquery/jquery-migrate.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:11:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/jquery/jquery.cookie.min.js

162.213.255.94

200 OK

687 B

URL HTTP/2
bloxholder.com/assets/scripts/jquery/jquery.cookie.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (1241)
Size
687 B (687 bytes)
Hash
11f0c038a08b8d6794ced3104f407d91
4950fa1e5d8b56fa88bd3f1f185edeccd3d49e98
64a0ba903b0761736ee341db4b7c960bb9fe3b700c4fcc90513a516d82afed90

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/jquery/jquery.cookie.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:11:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 687
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/featherlight.min.js

162.213.255.94

200 OK

3.3 kB

URL HTTP/2
bloxholder.com/assets/scripts/featherlight.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
Unicode text, UTF-8 text, with very long lines (8615)
Size
3.3 kB (3300 bytes)
Hash
fce78b5871d96ab7aab4d43ce6b70795
30ef4b45504780c8a9a6218edc5cedff289ae5a9
554a9f06c87c3e60e98890920c169ab31f8816ce90a13ff22c20697b97019c8b

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/featherlight.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:11:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3300
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/custom.css

162.213.255.94

200 OK

4.8 kB

URL HTTP/2
bloxholder.com/assets/styles/custom.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (60826), with no line terminators
Size
4.8 kB (4811 bytes)
Hash
e46fcb12d661185f855ac8763827c5ed
8fce57af92d7f2a4e18f67709062c7c5c2ab06dc
e003889e970941e7310792b320bdf546ce10c91e40ad872ff03667097dd5a2c8

HTTP Headers

GET /assets/styles/custom.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Sun, 19 Jun 2022 14:36:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4811
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/bloxholder_logo.png

162.213.255.94

200 OK

15 kB

URL HTTP/2
bloxholder.com/assets/images/bloxholder_logo.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Size
15 kB (14820 bytes)
Hash
3201fbe51e99b39d057485f1f931451e
100591c9a1b62cc5809bcccc1e55b0ebfcd0f680
75497983370bb020988d3d18bf94bd84db93e59364123aa196d6d7fdea177898

HTTP Headers

GET /assets/images/bloxholder_logo.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: image/png
last-modified: Thu, 16 Jun 2022 19:50:30 GMT
accept-ranges: bytes
content-length: 14820
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/js.cookie.min.js

162.213.255.94

200 OK

899 B

URL HTTP/2
bloxholder.com/assets/scripts/js.cookie.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (1668)
Size
899 B (899 bytes)
Hash
22d65ba38528349e705d912ce26bf8ac
c89ba006009043d93b88ff155b4fec8797330550
6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/js.cookie.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:12:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/cart-fragments.min.js

162.213.255.94

200 OK

934 B

URL HTTP/2
bloxholder.com/assets/scripts/cart-fragments.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (2938), with no line terminators
Size
934 B (934 bytes)
Hash
cf25dd071a208312bdc07f34d2cee027
76119563119eaae392ecc8903c989d98d0b93002
8635ba2cad8f887e72779bd526f8738ff6343c74cba715caf2eddea383ba7ce6

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/cart-fragments.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:13:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/pep.min.js

162.213.255.94

200 OK

5.3 kB

URL HTTP/2
bloxholder.com/assets/scripts/pep.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (17954)
Size
5.3 kB (5302 bytes)
Hash
6117cd52db688edf5cafcfc64055b6d3
5faefab9f69a3640ea3a6808c863aa50a36af651
b3e7e0a5235520e8705c73aa129716b2070f9d1c32eb9b7d1aa31b035d2d76d4

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/pep.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:14:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5302
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/header-cart.min.js

162.213.255.94

200 OK

251 B

URL HTTP/2
bloxholder.com/assets/scripts/header-cart.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (531), with no line terminators
Size
251 B (251 bytes)
Hash
376fd2339cb0a226318929c5c81a54d1
baaf74679bb6dfe80c8f086d782017db53407897
5f33252e9ec9b474dd68b11d8a9724d75c4bc9ab30b85efafbc7b920a64fd967

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/header-cart.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:14:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 251
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/footer.min.js

162.213.255.94

200 OK

323 B

URL HTTP/2
bloxholder.com/assets/scripts/footer.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (745), with no line terminators
Size
323 B (323 bytes)
Hash
ff838483d9ccbdb8191c95bc0050caa2
fadbe35b28c48d5baa480fcf00433457adb28b94
c0e89dc0472a40c70ebea0986299c3d5bf1c7f76f9df3927efca722942b6aef3

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/footer.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:14:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 323
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/hoverIntent.min.js

162.213.255.94

200 OK

668 B

URL HTTP/2
bloxholder.com/assets/scripts/hoverIntent.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (1464)
Size
668 B (668 bytes)
Hash
b57bb5f7f55be8837811df1bbfebd197
a9fd3372526724938daa13cba926cff79395cbae
26512154e931a4b5441386af49e0e6d93a298ec6ae9ce2088d292cba42d61c7c

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/hoverIntent.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:14:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 668
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/maxmegamenu.js

162.213.255.94

200 OK

3.6 kB

URL HTTP/2
bloxholder.com/assets/scripts/maxmegamenu.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (2347)
Size
3.6 kB (3610 bytes)
Hash
4b86733bae66c4cfa2321db1670a9ca4
5428b730be355c35f07c4a0d18c8a16db7fd7c13
cbf97c7db920d8af5d5e6dfbaccf1d2ddbdb9b379c258027944c2ea8e734e965

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/maxmegamenu.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:15:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3610
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/helper.js

162.213.255.94

200 OK

198 B

URL HTTP/2
bloxholder.com/assets/scripts/helper.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (342), with no line terminators
Size
198 B (198 bytes)
Hash
0c2d7a1722542df8a1a741cabe2e6753
2f56181a661921474a475174060f2f2093157eb9
8d0c9ea7917396536fc54dd37fee7dcae690b3cad91bcbc337fe6f9668622e66

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/helper.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:15:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 198
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/styles/style-child.css

162.213.255.94

200 OK

28 kB

URL HTTP/2
bloxholder.com/assets/styles/style-child.css
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65294)
Size
28 kB (28283 bytes)
Hash
1095d1321d3abd54a135216ea24c5014
c6f689859d4fe5315c5745937d3439b169f91c9b
33da87319d27c7043d424b102fadf8be9a0f0f5d9c0d423792b9ce446fe1d489

HTTP Headers

GET /assets/styles/style-child.css HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 21:04:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 28283
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/scripts/jquery/jquery.min.js

162.213.255.94

200 OK

30 kB

URL HTTP/2
bloxholder.com/assets/scripts/jquery/jquery.min.js
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65447)
Size
30 kB (30273 bytes)
Hash
34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/scripts/jquery/jquery.min.js HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: application/javascript
last-modified: Sat, 18 Jun 2022 19:11:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17372
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 08:37:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17372
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 08:37:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17372
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 08:37:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17372
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 08:37:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17396
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:37:07 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg

34.120.237.76

200 OK

6.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.2 kB (6174 bytes)
Hash
b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 00:54:54 GMT
age: 27733
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7591 bytes)
Hash
d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:08:56 GMT
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
age: 37691
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10270 bytes)
Hash
4c7113338bc3310b13d23ca415c177e2
2cb4edc6b161c6d2d5b47aa498ae54e677966466
3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10270
x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfG1nEvYoAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NQ21d2_5JO2Ym-LEnDecub9bK6wUyvM2zUf_XpfMGag83fVWlMjT8w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:09 GMT
age: 38818
etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.3 kB (7334 bytes)
Hash
498ab4412ed5cf977bc23e4e870894b0
23753fe8af09ec8ffa10eed4d201a71833885c99
036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 17nFm7AQdmRYS_af-EJ4XBVw8l3YudcphlpcZMveuVjvjhhYdkAQsw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:33:10 GMT
age: 36237
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

2.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
2.9 kB (2942 bytes)
Hash
b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 39740
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

16 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356e23df-cb76-452a-b299-da5410086837.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
16 kB (15495 bytes)
Hash
82ea44d6cb116fb1f5752ce9bb87e345
f799dfd89a4f5a452dc837b8616549f578fb4184
e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356e23df-cb76-452a-b299-da5410086837.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 15495
x-amzn-requestid: 977cdbce-3a9c-4006-a5a1-5c4c82bd4a94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDIFxzIAMFzEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-4b2cb3a16ca745537a8caf8c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nwKxQKsw8g5zCzfMFu_XpOac5rhImez29TKrycGJzozZyHTzoCHASw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:20:06 GMT
age: 37021
etag: "f799dfd89a4f5a452dc837b8616549f578fb4184"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

bloxholder.com/assets/images/bloxholder-trade-server-500x304.png

162.213.255.94

200 OK

121 kB

URL HTTP/2
bloxholder.com/assets/images/bloxholder-trade-server-500x304.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 500 x 304, 8-bit/color RGBA, non-interlaced\012- data
Size
121 kB (121312 bytes)
Hash
ce1d8e1e96f221038863697a7742c97a
3157c67403c920e0a4c26353b5064aa049ef67f1
9dc67dee20f8318ac84b95e612911094ef18a95fa83d9a880e23579c6e23a8f9

HTTP Headers

GET /assets/images/bloxholder-trade-server-500x304.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: image/png
last-modified: Mon, 27 Jun 2022 21:13:10 GMT
accept-ranges: bytes
content-length: 121312
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/bloxholder-cloud-500x304.png

162.213.255.94

200 OK

109 kB

URL HTTP/2
bloxholder.com/assets/images/bloxholder-cloud-500x304.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 500 x 304, 8-bit/color RGBA, non-interlaced\012- data
Size
109 kB (108611 bytes)
Hash
50b84b20926e41c9e6b04f32ad97c331
5c4cfb4de1b38ba83d19cd496ebdc7192eea4560
30c5747791f5ae7caa08e3eaa2bf068e0f510cdb94e0f9594eb8ab5572e97c0a

HTTP Headers

GET /assets/images/bloxholder-cloud-500x304.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: image/png
last-modified: Sat, 18 Jun 2022 19:39:02 GMT
accept-ranges: bytes
content-length: 108611
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/scoop-top.png

162.213.255.94

200 OK

2.3 kB

URL HTTP/2
bloxholder.com/assets/images/scoop-top.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 3200 x 60, 8-bit colormap, non-interlaced\012- data
Size
2.3 kB (2320 bytes)
Hash
89c31dd292bfe670d14c1ccc6feb7f80
2f93f3e8523d71b2efabc464e75891b71338f641
1ccc1597af315473bd81001b335e438605659c18ec2117dc57430688c54cfd1d

HTTP Headers

GET /assets/images/scoop-top.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/assets/styles/style-child.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:07 GMT
content-type: image/png
last-modified: Sat, 18 Jun 2022 15:17:56 GMT
accept-ranges: bytes
content-length: 2320
date: Fri, 02 Dec 2022 08:37:07 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-regular.woff2

162.213.255.94

200 OK

16 kB

URL HTTP/2
bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-regular.woff2
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 15908, version 1.0\012- data
Size
16 kB (15908 bytes)
Hash
76d8cbb0496cb184eff868152b67ad45
d4ae4e38ca7bb859c359e9df16efeb35a009053c
cb992eae898417162c48b37712991d9ad8053c4a64fce51aff195edc69dc35f2

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/fonts/source-sans-pro/source-sans-pro-v11-latin-regular.woff2 HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bloxholder.com/assets/styles/style-child.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:07 GMT
content-type: font/woff2
last-modified: Sat, 18 Jun 2022 15:03:32 GMT
accept-ranges: bytes
content-length: 15908
date: Fri, 02 Dec 2022 08:37:07 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-600.woff2

162.213.255.94

200 OK

16 kB

URL HTTP/2
bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-600.woff2
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 15784, version 1.0\012- data
Size
16 kB (15784 bytes)
Hash
b3866d3fbe239e8754f4db4795ce2817
a0c7bead0f83f1a6419f026c899de3af7c9e55e2
d8381e66783011957eabadb622d7899061bf93e78fff38ebfe00ab743d6c8e60

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/fonts/source-sans-pro/source-sans-pro-v11-latin-600.woff2 HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bloxholder.com/assets/styles/style-child.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:07 GMT
content-type: font/woff2
last-modified: Sat, 18 Jun 2022 15:03:58 GMT
accept-ranges: bytes
content-length: 15784
date: Fri, 02 Dec 2022 08:37:07 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-300.woff2

162.213.255.94

200 OK

16 kB

URL HTTP/2
bloxholder.com/assets/fonts/source-sans-pro/source-sans-pro-v11-latin-300.woff2
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 15764, version 1.0\012- data
Size
16 kB (15764 bytes)
Hash
88af84171d497039b4d02eb4815b80c6
25e317eccfe2a3098cf5afc97075c612c2dd358d
1851a4758fa23827c8ef2d994b9bf4b8d0b3b54570f55cb5e5d5e7836a69b502

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /assets/fonts/source-sans-pro/source-sans-pro-v11-latin-300.woff2 HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bloxholder.com/assets/styles/style-child.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:07 GMT
content-type: font/woff2
last-modified: Sat, 18 Jun 2022 15:04:02 GMT
accept-ranges: bytes
content-length: 15764
date: Fri, 02 Dec 2022 08:37:07 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/backtesting-simulated-paper-trading-crypto-bots.png

162.213.255.94

200 OK

329 kB

URL HTTP/2
bloxholder.com/assets/images/backtesting-simulated-paper-trading-crypto-bots.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 950 x 756, 8-bit/color RGBA, non-interlaced\012- data
Size
329 kB (328788 bytes)
Hash
24dde1072f6ee58f342e58e8685a57e8
9c6af9c367629cd626b8ddb3d67faac901d52e1b
68af76b6ed9059f00e21eed19c51cadb0decc72a37939356c89802b280b59540

HTTP Headers

GET /assets/images/backtesting-simulated-paper-trading-crypto-bots.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: image/png
last-modified: Mon, 27 Jun 2022 21:13:38 GMT
accept-ranges: bytes
content-length: 328788
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/bloxholder-crypto-trading-bot-referal-program-1024x776.png

162.213.255.94

200 OK

465 kB

URL HTTP/2
bloxholder.com/assets/images/bloxholder-crypto-trading-bot-referal-program-1024x776.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 1024 x 776, 8-bit/color RGBA, non-interlaced\012- data
Size
465 kB (465131 bytes)
Hash
dc41333c27f30b45b85ee8fb9301c144
66f3b885834dd60dbd24d87bb9c8de8a67c7e565
7ab3fe1fb821a26707b0c71b1e5d797cd70ea78c5415f4f37a7d9ccdc290a1b3

HTTP Headers

GET /assets/images/bloxholder-crypto-trading-bot-referal-program-1024x776.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: image/png
last-modified: Mon, 27 Jun 2022 21:04:50 GMT
accept-ranges: bytes
content-length: 465131
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/bitmex-trade-bots-cryptocurrency-exchange.png

162.213.255.94

200 OK

693 kB

URL HTTP/2
bloxholder.com/assets/images/bitmex-trade-bots-cryptocurrency-exchange.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 2174 x 1358, 8-bit/color RGBA, non-interlaced\012- data
Size
693 kB (692656 bytes)
Hash
98e157c754cb184fcb6127d3c6574e3d
d23466bf7eb13713abf206965001aed96d80c902
c56559cc722259e0c99bee2982d07d4373ef9b1e4d41d8323313c2b3bf378ba3

HTTP Headers

GET /assets/images/bitmex-trade-bots-cryptocurrency-exchange.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:06 GMT
content-type: image/png
last-modified: Mon, 27 Jun 2022 22:34:08 GMT
accept-ranges: bytes
content-length: 692656
date: Fri, 02 Dec 2022 08:37:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/apple-touch-icon.png

162.213.255.94

200 OK

16 kB

URL HTTP/2
bloxholder.com/assets/images/apple-touch-icon.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 158 x 158, 8-bit/color RGBA, non-interlaced\012- data
Size
16 kB (16503 bytes)
Hash
3c76a588304866cab79577fb4d4c01cb
7f1d02ea837f7a76a2ffe0de5b1ecf89a7c45cf5
8fc91b2f621e468d36eedd9439276ad470172b34a1902c471d94a2cb1f398f90

HTTP Headers

GET /assets/images/apple-touch-icon.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:08 GMT
content-type: image/png
last-modified: Thu, 16 Jun 2022 22:35:20 GMT
accept-ranges: bytes
content-length: 16503
date: Fri, 02 Dec 2022 08:37:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

bloxholder.com/assets/images/apple-touch-icon_16.png

162.213.255.94

200 OK

944 B

URL HTTP/2
bloxholder.com/assets/images/apple-touch-icon_16.png
IP
162.213.255.94:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
944 B (944 bytes)
Hash
acf03f17701a186545ba5738da13c0d0
9a2768c22b417cbdd23410c712ed3bdedffccd98
fef45aa1f127286801bbd478aff880d2c6b032d0051b99019cd77362e4478b8b

HTTP Headers

GET /assets/images/apple-touch-icon_16.png HTTP/1.1
Host: bloxholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloxholder.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 08:37:08 GMT
content-type: image/png
last-modified: Thu, 16 Jun 2022 22:37:06 GMT
accept-ranges: bytes
content-length: 944
date: Fri, 02 Dec 2022 08:37:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations