| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg |  185.107.58.211 | 200 OK | 367 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash756f64249f1f943e61bff54780b49cd8 e4beba68e98c966f57a6cca0e40915ba60500e23 cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-16f"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js | 185.107.58.211 | 200 OK | 4.0 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (4014) Hash4950423c548a646372ae58f7bbe67d1f f54943150a9cc3db37bba49e9abb8f1206b8b12b ab69f8053e420d7f3c043b55a1bfebd9981ccf92c21b4fd823031ab51967323a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-faf"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg | 185.107.58.211 | 200 OK | 2.4 kB |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash23ea3f2c9b976eb82c1556881543ec7a df83b819176d4e3e12e59345ed1bf94c59f01d37 888b95081206a0c3488cb21d3e8b0b4fb98491f80931f39587dced1b04700e96
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-97c"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg | 185.107.58.211 | 200 OK | 1.3 kB |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashcf165af749d574a25a1a29f31b0ed692 fd1663941236e3105b46f020e0e23913452b2585 4c5edc0c143fffe3bfed4126d2b3527e6e21c57499af43f9577b45c6eb93e598
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-50a"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg | 185.107.58.211 | 200 OK | 335 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash97eaf9e3e1e5795116e411e3408c8ad5 62d0a947b1ddc561aaa6b0db15a115cc38263e86 361ceeb485933d4e9e5374bab0acf83404a5b7f634e6ee3bc61a3f125cea19af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-14f"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/001.png | 185.107.58.211 | 200 OK | 738 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/001.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 1536 x 791, 8-bit/color RGBA, non-interlaced Size738 kB (737494 bytes) Hash65449307f0d3bca8d53fb2471517da7f be5dc91b0bf2fa9a426827bd33b980ff42d65f8e 3bbb257914a6e0dfa91b3528ebda8bb814e9cea34025ff91956e97b8eb72660c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/001.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 737494
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-b40d6"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/seo-by-rank-math-pro/includes/modules/schema/assets/css/rank-math-snippet.css | 185.107.58.211 | 200 OK | 389 B |
URL GET swap-maxair.com/wp-content/plugins/seo-by-rank-math-pro/includes/modules/schema/assets/css/rank-math-snippet.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (389), with no line terminators Hash45977ac32578852ab779878e707c5cfc db52f8d7fc8d76beb51d3091b94c511a0810c8cd a39445bf758c3548d49b5da4a18bb3ecb3e263ed0aa97a29a83a9822cd222d30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/seo-by-rank-math-pro/includes/modules/schema/assets/css/rank-math-snippet.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-185"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/background.png | 185.107.58.211 | 200 OK | 45 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/background.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 1920 x 1280, 8-bit/color RGBA, non-interlaced Hashea3e196184a91356e5b169798bc9a0f0 ff8c138f00e74900eda636c743f639b7d123c846 7fe034ec5d4b86c925a72db343f202dd2809d60c3e45d3ac094060025017c0c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/background.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 45311
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-b0ff"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/uploads/generateblocks/style-global.css | 185.107.58.211 | 200 OK | 529 B |
URL GET swap-maxair.com/wp-content/uploads/generateblocks/style-global.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (529), with no line terminators Hash2a02663984e6601721e6645911eceef6 86378776c69eb80ecd224ae148415c819e9c3e81 8ffd74d1e33550f5c67179da6e0d1b7601a328a5647bc34811750fd8118128db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/generateblocks/style-global.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-211"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-includes/js/jquery/jquery.min.js | 185.107.58.211 | 200 OK | 88 kB |
URL GET swap-maxair.com/wp-includes/js/jquery/jquery.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-15601"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg | 185.107.58.211 | 200 OK | 310 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash73699780fe17013ad360d5441cba044d 3e37c78fdc79aada415a05c2275c0fdf9664f062 e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-136"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json | 185.107.58.211 | 200 OK | 2.2 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
Hash974c06c22e80fbf8fc59a64946494b43 6f25ac4d1108e81458e684ff3cd2fdbd8ac32786 1e4455cdccea0ee7e1e5d9e13c5b2be8b964c3012341201f22092952036489a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Cookie: wp-wpml_current_language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:18 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-867"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js | 185.107.58.211 | 200 OK | 30 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26958) Hash0d7765bae213b8cf43ba5f06960055ec b97311bed465062adfe3b0f20f363441be2d4881 e889e4e37ac5bce51552e6432402bad41853158bd662f41bbc50acceaff5a1f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-7362"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg | 185.107.58.211 | 200 OK | 249 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashd1724c02c151d1f44b22d5c89e199c54 fbb67ed0796f19c50d9354ffa54a0103d33049b7 0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Content-Length: 249
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-f9"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg | 185.107.58.211 | 200 OK | 352 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash34ec214f5547e19d4e1fe9d0d638f9c7 7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5 ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-160"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-includes/css/dist/block-library/style.min.css | 185.107.58.211 | 200 OK | 112 kB |
URL GET swap-maxair.com/wp-includes/css/dist/block-library/style.min.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (57765), with CRLF line terminators Size112 kB (112437 bytes) Hashe4038793bd9dba450fbde333ebb2c7ad 5a97376465e75ea223102550aaaef51d878890f8 73e546a25c697a9fc474c8e6e2feda5a769bee52ca2062d87adf6b96b06a6e92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1b735"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css | 185.107.58.211 | 200 OK | 258 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with no line terminators Hash886011711ae972cd8472eef5eba5c298 6e52e59dfcbe911b4ab1a69036e1e3b930030c7e 4b9257e3e9c959214ddfab833a69a021ae6557403efe76afcbee259621175274
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-102"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg | 185.107.58.211 | 200 OK | 362 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashc4d7abcf4c21c729ea9aab45faa1912a 6ecbf40cb392204b8c7af284352108b500111969 33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-16a"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg | 185.107.58.211 | 200 OK | 509 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashad2d06f8e09051f574083a3d00b0d3c4 278327ff2ba9f9ff2075e69635576298e083a56f 855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1fd"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg | 185.107.58.211 | 200 OK | 299 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashbebccff3aeba51647f0dce95d6551d53 b257a531d6b251909e3174a7820c24d19b54559f 5e92000c8341f0ea10f5677f62c071202b412f252a361d79a0d4a7fa09910aca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-12b"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/themes/generatepress/assets/js/menu.min.js | 185.107.58.211 | 200 OK | 7.3 kB |
URL GET swap-maxair.com/wp-content/themes/generatepress/assets/js/menu.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (7333), with no line terminators Hash67148b2ff82038d0faf6385f182c5644 7452d643e468caf6db8ecf07618f1cb7ff3f7651 5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/generatepress/assets/js/menu.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1ca5"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/favicon-150x150.png | 185.107.58.211 | 200 OK | 5.3 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/favicon-150x150.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 150 x 150, 8-bit gray+alpha, non-interlaced Hash75e45df2405789a1605b280e3cab067f dd23a6c725a7ad974835a28de1fcc41b4f35ca0c 7bf7fe9cfae6aa90f7485ac193439366b72db37f7613bfb1a7a75d4e73ba9d16
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/favicon-150x150.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Cookie: wp-wpml_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:18 GMT
Content-Type: image/png
Content-Length: 5323
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-14cb"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/images/flags.png | 185.107.58.211 | 200 OK | 71 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/images/flags.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced Hash416250f60d785a2e02f17e054d2e4e44 21572c9751e5a3dc20395befa0fcb349c32c4811 0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/images/flags.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css
Cookie: wp-wpml_current_language=en; SERVERID=w02-8888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:18 GMT
Content-Type: image/png
Content-Length: 70857
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-114c9"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/css/widget.css | 185.107.58.211 | 200 OK | 7.9 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/css/widget.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (7914), with no line terminators Hashc0526b907bd105ac9d2606c1f6d5225c 38c1efab7570951029c569ea67875e1c0a52f5e2 995420b5354d83b5f15d0a86ff2ac19bc33516e5ec7d0465a9398011a512c336
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/css/widget.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1eea"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg | 185.107.58.211 | 200 OK | 609 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hasha3bce36139bdbeeb26d9847b105692d0 b89a8460c0b7f3b038e3202038ad706ade7e73eb b023af9d9a9bde7e7f6136b1ba2fbcc5807af1c5f6dac17b383c29a8692f851c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-261"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg | 185.107.58.211 | 200 OK | 352 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashe9efcfc75d8fdee9370032dc72e78bcf 77d974568d91216054eee046c19c99f71cccb9be a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-160"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json | 185.107.58.211 | 200 OK | 2.2 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
Hash974c06c22e80fbf8fc59a64946494b43 6f25ac4d1108e81458e684ff3cd2fdbd8ac32786 1e4455cdccea0ee7e1e5d9e13c5b2be8b964c3012341201f22092952036489a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Cookie: wp-wpml_current_language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:18 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-867"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js | 185.107.58.211 | 200 OK | 54 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash4d7fd4ec2c26288cf2ad585f0d4e24a0 efc14e1f1f8b40d6058770ebe879a1538acbd295 22a2e54ee3cc97ff26fa83366ed627ff8480ca19fa13145e0ab4180a17e9e794
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-d374"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg | 185.107.58.211 | 200 OK | 355 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash1932756ac7767c2f33986237417d8731 84a604da4f8df24af728a73685c4cc2cad9de962 8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-163"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js | 185.107.58.211 | 200 OK | 271 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
Hashc6a55456af4776c733018888483aba22 297b53f8538ba3b59d2028f16de4e14ec90337ce 20be9b3c63a01d921697a0ef1c1596f647678498eefe6dc508e2363be25277f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-10f"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js | 185.107.58.211 | 200 OK | 245 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1654) Size245 kB (245226 bytes) Hash12855fe710661551c42e95a9c9290600 72c56f9f3584405934289059ccd5ed678ddcb00c df0797876b146528f534dc356f34fd6408384ca47baae6ecdfcdf0463294f142
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-3bdea"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/Icon-4040.png | 185.107.58.211 | 200 OK | 2.1 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/Icon-4040.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 40 x 33, 8-bit/color RGBA, non-interlaced Hasha297fe92903d7127f302aa4029601cdf 2399f6ecd24fd83521e67b40ccb8ec82c9520dd1 354125dda12f8d6c65d538c7c7875ee4e90ceee4f624a7f00bcc4b6c96538d16
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/Icon-4040.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 2079
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-81f"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg | 185.107.58.211 | 200 OK | 335 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashfbae98f9ecb2c7a0d7bbadd4cda16c54 0799313019185c31326cca8c6af85520f0ef05db a5531f87b36975a82c97748b5405c1f3d6d1fa7fa3f78843aea4b67903b76e7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-14f"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min.css | 185.107.58.211 | 200 OK | 1.1 kB |
URL GET swap-maxair.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (1061), with no line terminators Hash340df9cb2c8a1e5d5428a81637866c40 759e7dffd2c0427030749b61e4193046b515f6ef d5d086ab8dd7703a41e01c913e225fafdc942be3bbd121dbd3c615f33091875f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-425"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css | 185.107.58.211 | 200 OK | 5.9 kB |
URL GET swap-maxair.com/wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (5901), with no line terminators Hash620bdc2e262641f4cee95c34de331140 588be9ecfa8899889f324f17b4fe3f0828acd478 ff95720758215ef9f328fda9e5b00e7c64421bcc8c0439e38201492e0fa78616
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-170d"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js | 185.107.58.211 | 200 OK | 6.8 kB |
URL GET swap-maxair.com/wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (6795), with no line terminators Hash2c8d926d887909904dab4316508bacc6 455db3d80b61fefab3797bacd140f95229fa7518 50fe1014e82dd9acea2f5b26061c8f135cb11ea0aa5d5ad5985e6b265b7f50a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1a8b"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js | 185.107.58.211 | 200 OK | 6.9 kB |
URL GET swap-maxair.com/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (6883), with no line terminators Hashca1e68e1ae2dbb2206d21481576bbb45 eecac929830764dba8b0734241090f2403671fa8 ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1ae3"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg | 185.107.58.211 | 200 OK | 376 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash6d7b2e74f61e873c0fb690155956025e b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8 4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-178"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/003.png | 185.107.58.211 | 200 OK | 223 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/003.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced Size223 kB (223384 bytes) Hash8d11e698acebd2b8474d5efa6938fe92 fcac7de5b15a09ddf284eb8c6d8af6b2eba2e088 da19cb8344b5ecfa7eb34a4865955e9f086f9fc8f5701df106c61aa0c1862d5f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/003.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 223384
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-36898"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg | 185.107.58.211 | 200 OK | 357 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashb072ff9b575b2c9db1f40db4a8603ea1 56c055fa39d04fdfbf8ca59c3186b982e301bbf2 3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-165"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg | 185.107.58.211 | 200 OK | 355 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash86458cbb859c05bf3fc54af01e50856b 9b0769e31e63686d55f311f9b0064ac1dd7f3f67 acd3a6a8487a79e9c9a0cdf7cd61f9f066e6c4aaa71050f93885562db997521e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-163"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/themes/generatepress/assets/js/back-to-top.min.js | 185.107.58.211 | 200 OK | 737 B |
URL GET swap-maxair.com/wp-content/themes/generatepress/assets/js/back-to-top.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (737), with no line terminators Hash5fc35421139ef9851bc72d3edb90cfba 0091cadf005c865d7c4ef093fac9d35566fd1e48 3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/generatepress/assets/js/back-to-top.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-2e1"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/animations-for-blocks/build/init.js | 185.107.58.211 | 200 OK | 1.5 kB |
URL GET swap-maxair.com/wp-content/plugins/animations-for-blocks/build/init.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1524), with no line terminators Hash9f00e7a01a899de3bf4078f642fd07ad ad1453c058e4d5701d2804e89404deed632a758e 13149903cb8c483403d33b8fde651410ac7708f7075f2d5149da3d406c324003
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/animations-for-blocks/build/init.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-5f4"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/favicon.png | 185.107.58.211 | 200 OK | 3.6 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/favicon.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 270 x 220, 8-bit gray+alpha, non-interlaced Hash4ee3c8625fe8c50d60abe2653d6e2b1e 77ca5fb97754ecc1ddd8a30ba073c23ed2b33dd2 6b095738e56800156bfb7b602d4cb59b2c5cc7d2a8001c1cc6b52c0130eaf137
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/favicon.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Cookie: wp-wpml_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:18 GMT
Content-Type: image/png
Content-Length: 3605
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-e15"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg | 185.107.58.211 | 200 OK | 374 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash0fe0a2e4225eee5dd8a3c73a5ab5a312 c930c1341640bee697cf50053721ddfd750dae2e 2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-176"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-includes/js/jquery/jquery-migrate.min.js | 185.107.58.211 | 200 OK | 14 kB |
URL GET swap-maxair.com/wp-includes/js/jquery/jquery-migrate.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-3509"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg | 185.107.58.211 | 200 OK | 1.7 kB |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash7deaaa44e02b9aea9fc1a7f8a70cfe34 d2f42c97768727cf6f006ebc8671eb14d7f0edc3 a920bc55182702e5ceb09b5750c765d2e0f4aee817a969f221e900e930fcb0de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-67c"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg | 185.107.58.211 | 200 OK | 520 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash7af14a6fd5253f05724502662d478fac df6f03167492046dd2f02e3e005e66201f80ceb9 f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-208"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/animations-for-blocks/build/aos.js | 185.107.58.211 | 200 OK | 14 kB |
URL GET swap-maxair.com/wp-content/plugins/animations-for-blocks/build/aos.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (13718), with no line terminators Hash8b849388c6d68be380f24e02345a4964 418f62b9487ce26490eb25961eae6f942f9e8948 246f32de6bf37276383af977f3a7cef0210fe76294f1c55f7125a36e30c8d25c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/animations-for-blocks/build/aos.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-3596"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/background-2.png | 185.107.58.211 | 200 OK | 30 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/background-2.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 1920 x 1280, 8-bit/color RGBA, non-interlaced Hashe6f10e4e6ce4d36c6864a1bbf78a3d42 818a756cdd6c9069491f44aa844225e1a1a5ed40 a1de8b814693d8f0007d83ec78feeb8680e93cc053d7991f61f906a279e78769
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/background-2.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 30307
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-7663"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js | 185.107.58.211 | 200 OK | 30 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash696c51dcd9631f02d28d39fadefdd67d 11fc826e34f795901c8a7ec0f7ef4831ad2b6022 52937687c44d798fb8cd512609692b035f37fdbce19e7eddb747f0c0f48e32d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-76af"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg | 185.107.58.211 | 200 OK | 449 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashf0950fb9089c4f9e32fb53b8fdaaad61 0a946bcdfa19977da80126e7e213e262344c4f29 b34f812ef46d9c15b14560edcd00d6f5a1a77a381dcb8e1414650f18dc963402
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1c1"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg | 185.107.58.211 | 200 OK | 352 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashb3459066e38308492a7ac98271d7b034 bdc08d8b6b3a4ab7eef55fb2b73028001f045581 3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-160"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg | 185.107.58.211 | 200 OK | 355 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash42103243a1d4c3f2e823e99f3c00aaa4 1d95a227efb867c8b3dfa2902ea8a803f3fd3519 0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-163"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png | 185.107.58.211 | 200 OK | 4.3 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 180 x 180, 8-bit colormap, non-interlaced Hash4cd1d4874ebef5120e63efa1c66278dc 3648f90f2ccc2e8ded42794dc0c0a363fc945527 caae22c3dadc5664eff10a1e3d0a5959bfea87d28f52f03ca4f3d7ebf560e5de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 4251
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-109b"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/seo-by-rank-math/assets/front/css/rank-math-snippet.css | 185.107.58.211 | 200 OK | 2.6 kB |
URL GET swap-maxair.com/wp-content/plugins/seo-by-rank-math/assets/front/css/rank-math-snippet.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (2475) Hash446b18326b6a7efc47be011ea468def5 dbc8692f8dbcc01efaa22454cb8f19992ead7462 5423a9a2ead65199cfe8f812727ca497fa9333824ebfaead1427ae2a9e25ba8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/seo-by-rank-math/assets/front/css/rank-math-snippet.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-9fa"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/themes/generatepress/assets/css/main.min.css | 185.107.58.211 | 200 OK | 20 kB |
URL GET swap-maxair.com/wp-content/themes/generatepress/assets/css/main.min.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (19512), with no line terminators Hashb7e067012db6249774c29e4c56b4f2c0 7523574074e98d492a8da515f0daf7446cc504e0 c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/generatepress/assets/css/main.min.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-4c38"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/animations-for-blocks/build/aos.css | 185.107.58.211 | 200 OK | 27 kB |
URL GET swap-maxair.com/wp-content/plugins/animations-for-blocks/build/aos.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (26859), with no line terminators Hash518f306b4db138fda80f7df763595c43 288d4ad98d26c17b8149be93a2c7c56dcada91bf f131dd49194cdd9c849bf28a73fdd6e5e700c481f6397d4a169d7e885b56b4ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/animations-for-blocks/build/aos.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-68eb"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg | 185.107.58.211 | 200 OK | 450 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hashd239e3431bdf290fb60f3ef98373fd05 55ce2a571994789df85b7a51460220bdd282cc9c 20a3b291b4d0d16bd2024c875924764f540ec2eebdc806a2852be000a6106035
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-1c2"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css | 185.107.58.211 | 200 OK | 59 kB |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (58697), with no line terminators Hash82a65dc43ead999e4c89efe2c1bbeb40 075bfb9ec99cfce789e3f3ac0ef2ff104dc1d50b af770f5afec3e9f10196ea60476a44dde4d80010e680500685b578fee468c8c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-e549"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css | 185.107.58.211 | 200 OK | 24 kB |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
Hash89ce447c1755a488d17bec881196adf3 1c0dd6b8549bf7023e9f302bc2490944aa5d998e 5ae1a7abb598b54b3dc3529b788bbee60faf9e68296b4d04154072cb8eec56f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-5ea5"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg | 185.107.58.211 | 200 OK | 3.1 kB |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash0c3ab5184e7b7429a458164488ad3704 6d5780433cbbd4b3a6f25c791a8ba59bc726f862 414878d5f95d09d4b5e65cdcdda185c7be3c775ba366add3b36d31479707b926
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-c17"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/002.png | 185.107.58.211 | 200 OK | 280 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/002.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced Size280 kB (279975 bytes) Hash71b6e9ebb372f21dfd21c3150188339f 6f581c6c5a38a2ade2283d73b92c17b9c8dedda8 6048f9cee03fb8bf2a4213154fe120d91d90c8d1d3c7c1033bc9589f5402f86f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/002.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 279975
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-445a7"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css | 185.107.58.211 | 200 OK | 1.9 kB |
URL GET swap-maxair.com/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (1908), with no line terminators Hash4b975a8395bd0a0410b576647ba50906 2e965a1cbe96545cfe0ea8495e8b48d5f7e0cb17 024f1241cafafa2e444fed0beee0ec230befac822d6f95ac4a3933ba2621dfec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-774"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg | 185.107.58.211 | 200 OK | 359 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash3621c5eb449691cbe1d3bc8757c831a1 e7e3674fe42359cc9a376e543d7548418071aea0 2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-167"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/background-3-e1714749144911.png | 185.107.58.211 | 200 OK | 16 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/background-3-e1714749144911.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 1920 x 816, 8-bit colormap, non-interlaced Hashe983333e76fb6935dd4c46fc601a2574 030fddaca8f50c17ef0c1e1f68e1bf48597d20c9 53545846286e3e67f8c9eb2431361a07e4796c124308cb64189783f7499d4ec2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/background-3-e1714749144911.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 15471
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-3c6f"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg | 185.107.58.211 | 200 OK | 714 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash82a1bb6b96ec71df6247971da6e35155 bb5be7dedff6612e4c8cb7c8019563c547238897 8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-2ca"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg | 185.107.58.211 | 200 OK | 1.6 kB |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash6ed3cf547a2f8579e45330fde3095537 dfc6023844bb5a110c3d9219c82dd326940ae055 c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-665"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg | 185.107.58.211 | 200 OK | 335 B |
URL GET swap-maxair.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeSVG Scalable Vector Graphics image Hash51768606d83a265da9e7ee8efbb21edb b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4 8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-14f"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min.js | 185.107.58.211 | 200 OK | 1.3 kB |
URL GET swap-maxair.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min.js IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1295), with no line terminators Hash443de93866d65f762354c9446ad8b366 19e310996d2549b6ad99f17dc800799571472aec 90a82d38c851758d27264c3808c81e7e52e4b04e03f5adb29e0e5df5021fa4b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min.js HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-50f"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/uploads/2024/05/background-1.png | 185.107.58.211 | 200 OK | 30 kB |
URL GET swap-maxair.com/wp-content/uploads/2024/05/background-1.png IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typePNG image data, 1920 x 1280, 8-bit/color RGBA, non-interlaced Hash3fdd11fffe3bcc49aa6eba19f6ad2771 5e1f79855be3f3cf19b4e2e8c940b4b2cc833314 df629fcdd660c0954fdb70c178182190dd72156a360476d8a76ed435dca71da0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/05/background-1.png HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: image/png
Content-Length: 29790
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
ETag: "671e37ae-745e"
Accept-Ranges: bytes
|
|
| swap-maxair.com/wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data | 185.107.58.211 | 200 OK | 142 B |
URL GET swap-maxair.com/wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
Hashba6605f8ce4a76fdd292485f5db4c1a2 246227e28c0a14aaabf929c7e98c665d793e9e74 2c669cf713927c358adc95b5cec9769ea622db31736068a1d1f56428dc6ae530
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Cookie: wp-wpml_current_language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:18 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-powered-by: PHP/7.4.33
Vary: Accept-Encoding, Accept
access-control-allow-origin: *
access-control-expose-headers: X-Set-Token, X-Pagination-Total-Count, Date, X-History-Filter-Hash, Fxbot-Referer
x-request-id: fae540f892cc1c02c100881d1d8e0e651530ea0ba1ed93f74f9d680d3387634f
cache-control: private
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=L1QoTAwU7%2B2qGUGi6XoX62DwNJ%2BAzquTMJ49Hzxl%2BYKAd66ToNs6FrvaibNzMiexm40LXbUIWqqsrYo0zmEEKEwOTNlbQgMLyPlY6l8i"}]}
set-cookie: SERVERID=w02-8888; Path=/
cf-ray: 94a267c4bf489fba-AMS
alt-svc: h3=":443"; ma=86400
Content-Encoding: gzip
|
|
| | 185.107.58.211 | 200 OK | 144 kB |
IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeHTML document, ASCII text, with very long lines (25194) Size144 kB (143785 bytes) Hasha92190a7c4486786b59b2c9b6cdacaba fda723688aacd9a99dd240c58a69219b7f728788 71e0ba136efce5b796886e89fff8cb7c1c2999d80ea9b3ac07514dc2cc5bdb4d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 25 May 2025 13:17:53 GMT
Vary: Accept-Encoding
ETag: W/"68331881-231a9"
Content-Encoding: gzip
|
|
| swap-maxair.com/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css | 185.107.58.211 | 200 OK | 1.6 kB |
URL GET swap-maxair.com/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css IP185.107.58.211:443 ASN#43350 NForce Entertainment B.V.
CertificateIssuerLet's Encrypt Subjectswap-maxair.com FingerprintAE:91:03:72:C1:7D:68:A5:BC:B3:01:94:77:AB:98:E5:3F:89:11:20 ValidityWed, 16 Apr 2025 16:27:41 GMT - Tue, 15 Jul 2025 16:27:40 GMT
File typeASCII text, with very long lines (1573), with no line terminators Hash4780517929a305d994c345c693c7e008 f259047949bc4dfff967499e5a207d0ac43e16fd aaef1023200ec674705f6efbf0d45a2f36ba49de83103623180b15dc1dd17694
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1
Host: swap-maxair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swap-maxair.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 03 Jun 2025 21:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Oct 2024 12:53:02 GMT
Vary: Accept-Encoding
ETag: W/"671e37ae-625"
Content-Encoding: gzip
|
|