| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd27590a1d3cbe1e9632b8ae92aaae3f4 202b34e8a0c3b88c8826fd56c6227b34f2cd6f46 6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16545
Expires: Sat, 19 Nov 2022 01:20:13 GMT
Date: Fri, 18 Nov 2022 20:44:28 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3a38b6dd8a4cc335c026aebf2ed348b6 8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8 8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4314
Expires: Fri, 18 Nov 2022 21:56:22 GMT
Date: Fri, 18 Nov 2022 20:44:28 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash67f53a639d57dd6237b5be86fe4f6c1b 287f09532dc331228d09c20b75f4160e91e9800a 41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6552
Cache-Control: max-age=142551
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:28 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 12:20:19 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KaY7QMMbJZ19dlMTnbt/zpgZe7WAfgOxLjpdPaEbzLm32xwG3aTcwQ91dMQvUPqNgDjwQHi0Y3k=
x-amz-request-id: XAR7JYQPRQTQ6FP2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 19:53:03 GMT
age: 3085
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashd130218d0e2841f39c99610fe1a2ab90 29fbe1e177ee55c7a61ae0a206afff271cf5f945 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 19:45:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3565
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbf51ac5c56be15c0fb93d07361474685 3ea04de35db4f602d91330d9c906460d242e0bad b43a5d0bdebdd4178418bf5bbee687f609cfb98d19a6770565e4c5174869cb32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B43A5D0BDEBDD4178418BF5BBEE687F609CFB98D19A6770565E4C5174869CB32"
Last-Modified: Wed, 16 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21544
Expires: Sat, 19 Nov 2022 02:43:32 GMT
Date: Fri, 18 Nov 2022 20:44:28 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 19:44:49 GMT
cache-control: public,max-age=3600
age: 3580
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfe40cc6ea871d80382b6082111393fbe 281f75d0a35dc8ef908bb0500e57abd86bd5388e 6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6278
Cache-Control: max-age=137225
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:29 GMT
Etag: "63774b30-1d7"
Expires: Sun, 20 Nov 2022 10:51:34 GMT
Last-Modified: Fri, 18 Nov 2022 09:06:56 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| valoria.ro/ieuq/index.php?qbot.zip |  92.114.98.191 | 301 Moved Permanently | 0 B |
URL HTTP/2valoria.ro/ieuq/index.php?qbot.zip IP92.114.98.191:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /ieuq/index.php?qbot.zip HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 18 Nov 2022 20:44:29 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-ua-compatible: IE=edge
x-redirect-by: WordPress
location: https://valoria.ro/ieuq/?qbot.zip
x-litespeed-cache: miss
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.69.181.45 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.69.181.45:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PJEn7mFkt0HuwAcPrLnnfQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YG2+6NvhJc+xFdRbXobI+JTi8rs=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16578
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 20:44:30 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16578
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 20:44:30 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16578
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 20:44:30 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash16bbadb18616687351d4047aedc2ab45 979123c7ad6726befbbab2c07b50ecca31aa2d18 de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash35da1192dcadc6e329a9e60c16904301 90a146aef85765630a5e09e46a0a8682e204bec1 816d1387a3a91a82f0bdaa2b703b45aa30be206d30d4dd1e8ac5deca13de57ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10281
x-amzn-requestid: 11dffc4e-71d7-4195-8890-62c8a2092728
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-77EWaIAMF3WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-3c0dc7e43023af827ac26958;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 48wUhxwMgsEj2J01EWOTCfWLNZPwFrjjXd6V_uSp8yae4YtGTTVlxA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:14:12 GMT
age: 81018
etag: "90a146aef85765630a5e09e46a0a8682e204bec1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash032386e5c9dffff1ba1ee5e8a322d438 dd4fd6c803a9b333bace9a541c6bd183d0c56bb9 0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CHi9V7-WaWmG6Y0249CZJnhe_RjvleaGFVXoOnJ62cjrcXoLLKwzgw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 18:45:50 GMT
age: 7120
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash30ad43f65949e7e22e73292e3d684f3d 9404b0071027ac7ec0055a9edfbd607e3a8ae501 b97961cbd2245f9927c1c0406451449d28cca24c98c534cace78321ac62eeeb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5955
x-amzn-requestid: fe915fbe-b1dc-4fbd-8a10-1cb46e08f56c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqPjHloIAMFidw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755730-16deb73f48305b0139b1d9bd;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qtpQ9y_8ohoqKpvTx-mWM439VyjZnpmTKKCEAEnknL3CVN8ZkiJaYQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:39:46 GMT
age: 83084
etag: "9404b0071027ac7ec0055a9edfbd607e3a8ae501"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg | 34.120.237.76 | 200 OK | 3.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5d0b6106f00f9fd8b89c2d484a559a1a 399ac393209dcdac7d2188d7aa8d95f04570ef7c 5d8151c9eb558f4a2b8bd2952c6845606ddb0c27e36f6e49aca7e60908cd9fe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3759
x-amzn-requestid: 8c91ac59-89dc-4218-b69f-0cebb29f301b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-wJHgxoAMF-hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab33-4dac305614a92bc52c038222;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mb2-PTjNmt06Wd5jOjQ5WoLY-0NgI80CKPXtwgzBt4n5km8Pu_WN0Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:50:49 GMT
age: 82421
etag: "399ac393209dcdac7d2188d7aa8d95f04570ef7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb2b393e36ee2c9649d90db136aa49542 e88c5832ff0c49bab181d948c3a510d88343bb6f 8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qpoQa1Lhe-h27dGooXDCtujesSTg7Tb0Ov-PNLnUP0288ZofwHxkhQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 82310
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha9d32fa3866dd741de610a61a93ad893 4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e 4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mhgNSp1_LsVmn00ULm116flMHpnfE6G6JABrJwXH5i4q-isv_W1-Ig==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:34:18 GMT
age: 83412
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-93095554-4 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-93095554-4 IP142.250.74.168:0
File typeASCII text, with very long lines (1921) Hash999a848b5ec345c688b05a8f853757bd b27e05d0432c08a1634e6d5670d613e18d2c8adb 5031c2a5ed1d5d889561ad473b96117295034b6d41248b57b2165d4d2e84ace9
GET /gtag/js?id=UA-93095554-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 18 Nov 2022 20:44:30 GMT
expires: Fri, 18 Nov 2022 20:44:30 GMT
cache-control: private, max-age=900
last-modified: Fri, 18 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43604
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash16bbadb18616687351d4047aedc2ab45 979123c7ad6726befbbab2c07b50ecca31aa2d18 de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| valoria.ro/wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2 | 92.114.98.191 | 200 OK | 128 kB |
URL HTTP/2valoria.ro/wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2 IP92.114.98.191:0
File typeASCII text, with very long lines (65536), with no line terminators Size128 kB (127627 bytes) Hash7d06737d539736a67b2a910c350acd0a b954f8507f6cf811746db664c3dfb1b71ac564ff aef3e940a4d0df7fceefebe31d87a7082940e7419e1db752ca4bd9494a7afb09
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: text/css
content-length: 127627
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 08:23:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 92.114.98.191 | 200 OK | 4.0 kB |
URL HTTP/2valoria.ro/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP92.114.98.191:0
File typeASCII text, with very long lines (11126) Hash7e058b51f939eacfa31cdface14dded5 9d732e5afdeb42edef9e1b9631b7e95e054787cc 4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 3995
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 26 Jan 2022 14:49:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/SmartBill%20WooCommerce3%20-%20v%202.9.1/public/js/smartbill-woocommerce-public.js?ver=1.0.0 | 92.114.98.191 | 200 OK | 916 B |
URL HTTP/2valoria.ro/wp-content/plugins/SmartBill%20WooCommerce3%20-%20v%202.9.1/public/js/smartbill-woocommerce-public.js?ver=1.0.0 IP92.114.98.191:0
Hashf00be147dba889becf7d39a676032e9c e746758285c99237badd4fca6abd3a39a6300ebe 3c59a60eb6f93c1a16ac00aac9c305331c9ef5c26e2b1b2a41404e4c62144a0d
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/SmartBill%20WooCommerce3%20-%20v%202.9.1/public/js/smartbill-woocommerce-public.js?ver=1.0.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 916
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Sun, 07 Aug 2022 14:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 | 92.114.98.191 | 200 OK | 3.2 kB |
URL HTTP/2valoria.ro/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (9111) Hash078e27719ab2b91e57a3d06d05bf24d8 ee2c8af72d9dbb148d4101a374f6026d0c9c3044 1c8b599f3f7bfa8d7950d95a171f2c873d051960a91c91e22304293596e5b890
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 3247
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 08:18:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 | 92.114.98.191 | 200 OK | 972 B |
URL HTTP/2valoria.ro/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 IP92.114.98.191:0
File typeHTML document, ASCII text, with very long lines (3029), with no line terminators Hash5ed77e0c59800f40061b5c322cff21fa ced9d401d300dd1fc676a673bbf7e6360beb402d 3b284b8a096256e6cd0d9cbf2cb4b36505e71c0d7b2227fcd3132dddbeea18cc
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 972
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 08:18:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 | 92.114.98.191 | 200 OK | 899 B |
URL HTTP/2valoria.ro/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (1668) Hash22d65ba38528349e705d912ce26bf8ac c89ba006009043d93b88ff155b4fec8797330550 6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 899
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 08:18:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 | 92.114.98.191 | 200 OK | 677 B |
URL HTTP/2valoria.ro/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (2139), with no line terminators Hasha43fc0dde8fdd69656ad0957e62849c7 4b07cf702ac8a770c8cbffc22b9a788b6e5389ba 1ce3d0493424870c81deec0ec41de0592d2af9f91cd8081cd40a1d7ea89b614f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 677
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 08:18:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 | 92.114.98.191 | 200 OK | 934 B |
URL HTTP/2valoria.ro/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (2938), with no line terminators Hashcf25dd071a208312bdc07f34d2cee027 76119563119eaae392ecc8903c989d98d0b93002 8635ba2cad8f887e72779bd526f8738ff6343c74cba715caf2eddea383ba7ce6
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 934
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 08:18:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/theme.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 4.0 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/theme.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (19789), with no line terminators Hashfbacc63ed65058dc22ba28d20d42d87d af4505033ad4fb82fb157d7f630b8a6edb2ee0f8 986aed424cc140b10b1342beb59e7fe01b1fa885e4b0f5e09427829cbf381911
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/theme.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 4015
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 92.114.98.191 | 200 OK | 1.7 kB |
URL HTTP/2valoria.ro/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP92.114.98.191:0
File typeASCII text, with very long lines (5477) Hashfa921f07ecc438baf227765de450e215 1fdd49d8bb681cb118ea8d67d4fc61b0ad46cc95 b2cc68637048b04952a2f33163f64571145dbe0817a14c68fe6f1661bd81091f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 1733
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 26 Jan 2022 14:49:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/sidebar-mobile-menu.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 3.7 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/sidebar-mobile-menu.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (15327), with no line terminators Hash800dc45c11c165bbfe732736240af3d3 698c6c956b23fe9c8088a9330113fc4123b0c322 7e2b42cb021b8bc9296843e32031bb0101c869528a70622e3352c8a9f2752fc5
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/sidebar-mobile-menu.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 3657
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 7.0 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (20087), with CRLF line terminators Hashcd77ebaa4544fc721b35a2c7f8ac06f2 54797d61a69f0f375e7484f9151fcffeabda919f 6481824a1cfa4ba748d3b4378dd1c648e7ea077a9131990c8efc9d7f301bfe48
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 7046
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 1.3 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (4111), with no line terminators Hash6785a1bb095623b52d8b6f5c77ab1c4d d375933429eba23eb86eb5c9795800c7e717f480 9084fd970309f300cceae024e2a0a6ab1bc3a1e133fb0faaebae407029c22023
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 1327
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 815 B |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (2002), with no line terminators Hash171844f21c8e85a19bf6d9400931e40c 183cd302d49cf285c7da829ce756af531e7f7755 4a0576e94d974ddf90c433f6cc2f03a03c4a2117faaa96515c7e5004b7886a5f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 815
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 92.114.98.191 | 200 OK | 30 kB |
URL HTTP/2valoria.ro/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP92.114.98.191:0
File typeASCII text, with very long lines (65447) Hash3a1740685bd5c0bbd5f2b812e1eb7fb4 488e07695da787fed18361c50292aef35abb5e81 4a07aed2d8cf88afdec0b56b365b951c76d387db3459166b5a0d25e2e6cc95ef
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 30324
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 02 Nov 2022 03:51:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/vendors/sidr.js?ver=1.0 | 92.114.98.191 | 200 OK | 3.0 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/vendors/sidr.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (9181), with CRLF line terminators Hashc634d39850b0f72772d31208247fb7fc 66d4a321170fdb4805ba4a2112ab7efea3060cbe d7aed27b4110fdab9ba5f35954a42496dc8abdaacf5f98acd880da7ddc194daf
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/vendors/sidr.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 2988
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 14 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (21914), with CRLF line terminators Hash3e338d8c5330808ddfaa6b246a5798a3 c9d44543da80d050e353a51267bfe90a415c5795 0a4a040b702be0be8b9b9112598213949eec71734b4ef1c8387dca0359ff2397
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 13619
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/uploads/2021/12/LOGO-VALORIA-2-1024x287-1.png | 92.114.98.191 | 200 OK | 58 kB |
URL HTTP/2valoria.ro/wp-content/uploads/2021/12/LOGO-VALORIA-2-1024x287-1.png IP92.114.98.191:0
File typePNG image data, 1024 x 287, 8-bit/color RGBA, non-interlaced\012- data Hash50e915f4e02d5b473bfdd8216162d3bf 22965f89144d2c8239b75c4c7f258ce70a23c734 0a4a2b566770948847433ea9529605eb9ad91eb2afe361c3ee244720369f1932
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/12/LOGO-VALORIA-2-1024x287-1.png HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: image/png
content-length: 57720
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 26 Jan 2022 14:49:36 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 3.0 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (12402), with no line terminators Hash5b4cc772d1f76006e50ce5c966fc0d03 420b6f7972cbf75dbae2c0f5444ac5823e704aba 5cc92f11e2d1fbb48e4212a704be27c4a3ceaa02650a840b1d40ba50ab656914
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 3024
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 2.1 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (8989), with no line terminators Hash6185808402bda215e4f7236f817466c2 bb7a5a8dea701972a0bb352122531f6e5d146377 f796ab2986eae473cc62ff0bfb30e0b8ad56ab419fe814df2943673808f1fac9
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 2145
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/js/select.min.js?ver=1.0 | 92.114.98.191 | 200 OK | 1.4 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/js/select.min.js?ver=1.0 IP92.114.98.191:0
File typeASCII text, with very long lines (5181), with no line terminators Hash7904cdab6435080eaec64b4d67beb8e0 16553f73d5549d22b09c992110fbcf947799a6ea f443194efd5bc7ad935fb1e44a4a6c365e2e5f45dcf4d343d983ab898e5810d7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/js/select.min.js?ver=1.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 1394
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/ocean-cookie-notice/assets/js/main.min.js | 92.114.98.191 | 200 OK | 610 B |
URL HTTP/2valoria.ro/wp-content/plugins/ocean-cookie-notice/assets/js/main.min.js IP92.114.98.191:0
File typeASCII text, with very long lines (1849), with no line terminators Hash7134720afb55ffa85b18a6230c72e186 0422fbd341cc208fbfa561a680a449fa69497f82 b5fea6ae59078fee3140908409309449cf1a00271038f76ca784bb8091e5131b
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/ocean-cookie-notice/assets/js/main.min.js HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 610
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 28 Jan 2022 14:05:03 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/ocean-stick-anything/assets/js/vendors/sticky-kit.min.js?ver=2.0.4 | 92.114.98.191 | 200 OK | 1.3 kB |
URL HTTP/2valoria.ro/wp-content/plugins/ocean-stick-anything/assets/js/vendors/sticky-kit.min.js?ver=2.0.4 IP92.114.98.191:0
File typeASCII text, with very long lines (546) Hash2ae7a573e93aede50a6ca2b25417db0e 932ef087f28974c6f93da1647a61e04e79fdd99a ddce554275ed09f63d1ee7f1291629c15820a91ada0af6d5814bab4a8842818f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/ocean-stick-anything/assets/js/vendors/sticky-kit.min.js?ver=2.0.4 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 1306
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 26 May 2022 09:11:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/ocean-stick-anything/assets/js/stick-anythings.min.js?ver=2.0.4 | 92.114.98.191 | 200 OK | 2.0 kB |
URL HTTP/2valoria.ro/wp-content/plugins/ocean-stick-anything/assets/js/stick-anythings.min.js?ver=2.0.4 IP92.114.98.191:0
File typeASCII text, with very long lines (6205), with no line terminators Hashf66ce0d8f0a9020caf198a0233aad24e 7cbcbce689f33ffd77b6ac2d7f0bf951dccef910 e9bd986022e365f72f40df672cb739870c13c8dbbb7ff3ec1e4c15a41e72cf21
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/ocean-stick-anything/assets/js/stick-anythings.min.js?ver=2.0.4 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 1965
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 26 May 2022 09:11:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.8.1 | 92.114.98.191 | 200 OK | 2.2 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.8.1 IP92.114.98.191:0
File typeASCII text, with very long lines (5191) Hashe4998c3ccd0be231c124cc8b901c9fb3 48f7574440965c442de02067c8a830fd2ce88533 d7cb3803938f026316dd1ac3056c785c9a56148783a8d8180c1aa0bb0a5e7961
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.8.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 2208
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Mon, 07 Nov 2022 06:43:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1 | 92.114.98.191 | 200 OK | 2.0 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1 IP92.114.98.191:0
File typeASCII text, with very long lines (4918) Hash918938b0ee6977d6506f2e0fa248bd66 292ba27818bec580f76945b53fee4ff6cddcb2c2 a1da723cfdb1f8ea57aa7278637d07a83f39ff410dfbba24d8205882a110444e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 2044
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 17 Nov 2022 22:50:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1 | 92.114.98.191 | 200 OK | 10 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1 IP92.114.98.191:0
File typeUnicode text, UTF-8 text, with very long lines (32907) Hash72fd7d7a61961996172a081cb3eed6cb 7f6d4dc14ef08153606c57d374fd50b685ba383d 757fe1355fa4c3eed3c286520c6af9d344ab9d15a78d8d54a17e7573f866b9be
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 10425
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 17 Nov 2022 22:50:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 92.114.98.191 | 200 OK | 2.4 kB |
URL HTTP/2valoria.ro/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP92.114.98.191:0
File typeASCII text, with very long lines (6475), with no line terminators Hash4e773d7cec56bacab6d2db420be6f262 c95573d884c1caec0ec9c6f3e2a8c0fbf28d939a 5c8839d0b02f21e8d83d856bbf85a6b87fbedf9ba0b70711b11a1c378d5443e7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 2354
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 25 May 2022 03:51:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 92.114.98.191 | 200 OK | 6.3 kB |
URL HTTP/2valoria.ro/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP92.114.98.191:0
File typeUnicode text, UTF-8 text, with very long lines (17819), with no line terminators Hashfecbc00e8af71d8cfb678cd811c7cb2e 44e5dd77f62cb5c67271442b75cdff10d45f2f8d d6f03fb4728d0c23251451df8d66b5107d3c87458dc624aacfbad437e99d01f1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 6335
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 02 Nov 2022 03:51:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 | 92.114.98.191 | 200 OK | 1.6 kB |
URL HTTP/2valoria.ro/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 IP92.114.98.191:0
File typeASCII text, with very long lines (4875) Hash06a8ac0e71976bc143cfa7861a31169d def6031fe13259bf17752661832d815e37068bf2 e6f42d97e7299522bbb002364128fdf72cd22263ca72c5edc41dcd8f4672cd33
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 1575
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 25 May 2022 03:51:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae | 92.114.98.191 | 200 OK | 3.7 kB |
URL HTTP/2valoria.ro/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae IP92.114.98.191:0
Hashf7acc55c5b34188d3e66c5f2ecf3ba80 802270f7a221e406af63d622d364b119d912c15b 826c4e13764f5bf1bd0a17f2e693d943f8605df1024815f67f43694f4338b713
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 3717
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 02 Nov 2022 03:51:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.8.1 | 92.114.98.191 | 200 OK | 5.5 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.8.1 IP92.114.98.191:0
File typeASCII text, with very long lines (21520) Hashf0e84537d354c9d7fb417acba75f1653 951a99450e68b70dd4fe96d2e9d78bac403c300e 5583cd2973b67e37163e8bbc5c83e3d0f5b73e0457ec7b3d0d1748b6ea6e5d3a
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.8.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 5541
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Mon, 07 Nov 2022 06:43:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 92.114.98.191 | 200 OK | 2.9 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP92.114.98.191:0
File typeASCII text, with very long lines (12198), with no line terminators Hash869caa171b68cbec9fee5abbfb944ee8 f237e485e41f88b77384cfdb880f9d5a8f46eac8 25c2896e2790fb0e52f6b6ba1ce97bd87eb40463b4bb65ba16ad434c1d7a36dc
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 2867
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 17 Nov 2022 22:50:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 92.114.98.191 | 200 OK | 6.8 kB |
URL HTTP/2valoria.ro/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP92.114.98.191:0
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash3d0ff0f6731d9cef860af9a5a0e3ce62 13aed444304d782039e261475c8b4450b83e743e e8d05db77732c71843ced6f386ea82eb32243ac36e7ca3e071cb7f53e2ffbce5
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 6800
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 02 Nov 2022 03:51:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1 | 92.114.98.191 | 200 OK | 12 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1 IP92.114.98.191:0
File typeASCII text, with very long lines (40474) Hashcf45d3e8044770ba8eabf3833e30fdbe 90f787b69fa2f83b87c28f3caa67985b04b333bd c83321c916d9ca392150cf727108c0927ce9394be70e9b08920cff666f823fb4
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 11702
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 17 Nov 2022 22:50:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.8.1 | 92.114.98.191 | 200 OK | 5.3 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.8.1 IP92.114.98.191:0
File typeASCII text, with very long lines (24753) Hashff896e47da3334dbd90470b83e1991da e081a180d3fcbf5cb63152b586e268a08fc64fc7 877098df168480af5db86ae8db2d52d424795e08651715ee91a8bc7b1287229f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.8.1 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: application/javascript
content-length: 5343
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Mon, 07 Nov 2022 06:43:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 | 92.114.98.191 | 200 OK | 80 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 IP92.114.98.191:0
File typeWeb Open Font Format (Version 2), TrueType, length 80300, version 331.-31392\012- data Hash8e1ed89b6ccb8ce41faf5cb672677105 9b592048b9062b00f0b2dd782d70a95b7dc69b83 6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://valoria.ro/wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: font/woff2
content-length: 80300
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.195 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 05:42:51 GMT
expires: Fri, 17 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 140500
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 92.114.98.191 | 200 OK | 77 kB |
URL HTTP/2valoria.ro/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP92.114.98.191:0
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://valoria.ro/wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: font/woff2
content-length: 76764
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Thu, 17 Nov 2022 22:50:21 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.195 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data Hash3fe71527811fbfedd2c07962e1bc49e7 f63e158a0480c5d711b5e268db0e75e57d87a8a5 24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 18:57:58 GMT
expires: Tue, 14 Nov 2023 18:57:58 GMT
cache-control: public, max-age=31536000
age: 351993
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:34:08 GMT
expires: Thu, 16 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 177023
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 | 216.58.207.195 | 200 OK | 12 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data Hash87ace20058325aa069320aa4af875dff b743548770c46d905ae1ba06310bc001c587fe8e 3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:35:48 GMT
expires: Thu, 16 Nov 2023 19:35:48 GMT
cache-control: public, max-age=31536000
age: 176923
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 | 92.114.98.191 | 200 OK | 30 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 IP92.114.98.191:0
File typeWeb Open Font Format (Version 2), TrueType, length 30064, version 1.0\012- data Hash0cb0b9c589c0624c9c78dd3d83e946f6 5da603104d4d6e362824ec9e7db32eb2d617949a 104673f4859604362a18fc6294197d8fffb8cb24ad3211e92eb04f655e18cf4a
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://valoria.ro/wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: font/woff2
content-length: 30064
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 | 92.114.98.191 | 200 OK | 14 kB |
URL HTTP/2valoria.ro/wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 IP92.114.98.191:0
File typeWeb Open Font Format (Version 2), TrueType, length 13548, version 331.-31392\012- data Hash4a74738e7728e93c4394b8604081da62 fb9648469530a05fa9aac80e47d4d6960472a242 ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://valoria.ro/wp-content/litespeed/css/8ef0e8931f9b3f232c317d768e238f2b.css?ver=67bb2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: font/woff2
content-length: 13548
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Fri, 18 Nov 2022 00:13:28 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3bccc7935612a834ead41e3457594647 9699606857e0c7d25a94f5f2d9caad3b4a9ef9f8 6e8fb76fc7ddf860aa43e0d54eb162f554b970ba096c92dbb36ed50341d55e6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5645
Cache-Control: max-age=94120
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Etag: "6376a54a-1d7"
Expires: Sat, 19 Nov 2022 22:53:11 GMT
Last-Modified: Thu, 17 Nov 2022 21:19:06 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/fbevents.js |  31.13.72.12 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP31.13.72.12:0
File typeASCII text, with very long lines (64348) Hash44ecaa3c2a4929a40141edc4540aaf84 f29a573182333b2500d41bfc389d6c5232dfb348 6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: /Okx5QZcJUhiRr9wALCyQSsWx77g/Xuf/y8nuRrprdW0FUEV9A9s9vDLp6V9bcRjclUwpnvtNMz+rDZlEKiRLA==
content-length: 27340
x-fb-trip-id: 1904183273
date: Fri, 18 Nov 2022 20:44:31 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| valoria.ro/wp-content/uploads/2022/01/Icon.png | 92.114.98.191 | 200 OK | 19 kB |
URL HTTP/2valoria.ro/wp-content/uploads/2022/01/Icon.png IP92.114.98.191:0
File typePNG image data, 253 x 253, 8-bit/color RGB, non-interlaced\012- data Hash335181f3933809e3fb828de6120865f8 5d25fbba8e8739bffa36d7bb7fa7cb729539af74 c0e099d018371b1cf21e51d89518e4db818fe0f9f2eed2d3393209c552905c10
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/01/Icon.png HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: image/png
content-length: 19089
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:30 GMT
last-modified: Wed, 26 Jan 2022 14:49:38 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3bccc7935612a834ead41e3457594647 9699606857e0c7d25a94f5f2d9caad3b4a9ef9f8 6e8fb76fc7ddf860aa43e0d54eb162f554b970ba096c92dbb36ed50341d55e6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5645
Cache-Control: max-age=94120
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 20:44:31 GMT
Etag: "6376a54a-1d7"
Expires: Sat, 19 Nov 2022 22:53:11 GMT
Last-Modified: Thu, 17 Nov 2022 21:19:06 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| valoria.ro/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js | 92.114.98.191 | 200 OK | 599 B |
URL HTTP/2valoria.ro/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js IP92.114.98.191:0
File typeASCII text, with very long lines (1320) Hashb59e163b50b8e62a7e08b4ce88241b48 4f45b1e9e0270133c35c43a1a33d5b2d292b8693 73ba293d6c6c5c89f37eb310eead199d2a7268ada96c881f41ec8ca5b7f693bb
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:31 GMT
content-type: application/javascript
content-length: 599
cache-control: public, max-age=604800
expires: Fri, 25 Nov 2022 20:44:31 GMT
last-modified: Thu, 17 Nov 2022 22:50:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=588298222668981&ev=PageView&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&rl=&if=false&ts=1668804269717&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%221237469390145507%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22RON%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22474255958143294%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1668804269716.249554713&it=1668804269501&coo=false&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=588298222668981&ev=PageView&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&rl=&if=false&ts=1668804269717&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%221237469390145507%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22RON%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22474255958143294%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1668804269716.249554713&it=1668804269501&coo=false&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=588298222668981&ev=PageView&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&rl=&if=false&ts=1668804269717&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%221237469390145507%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22RON%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22474255958143294%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1668804269716.249554713&it=1668804269501&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 18 Nov 2022 20:44:31 GMT
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 216.239.36.178 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP216.239.36.178:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 18 Nov 2022 20:41:09 GMT
expires: Fri, 18 Nov 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 202
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1692997274&t=pageview&_s=1&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&ul=en-us&de=UTF-8&dt=Page%20Not%20Found%20-%20Valoria%20Business%20Solutions&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YCDACUABBAAAACAAI~&jid=510165151&gjid=837860267&cid=1166706498.1668804270&tid=UA-93095554-4&_gid=989002746.1668804270&_r=1>m=2oub90&did=dZTNiMT&gdid=dZTNiMT&z=1688579572 | 216.239.36.178 | 200 OK | 1 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1692997274&t=pageview&_s=1&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&ul=en-us&de=UTF-8&dt=Page%20Not%20Found%20-%20Valoria%20Business%20Solutions&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YCDACUABBAAAACAAI~&jid=510165151&gjid=837860267&cid=1166706498.1668804270&tid=UA-93095554-4&_gid=989002746.1668804270&_r=1>m=2oub90&did=dZTNiMT&gdid=dZTNiMT&z=1688579572 IP216.239.36.178:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&aip=1&a=1692997274&t=pageview&_s=1&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&ul=en-us&de=UTF-8&dt=Page%20Not%20Found%20-%20Valoria%20Business%20Solutions&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YCDACUABBAAAACAAI~&jid=510165151&gjid=837860267&cid=1166706498.1668804270&tid=UA-93095554-4&_gid=989002746.1668804270&_r=1>m=2oub90&did=dZTNiMT&gdid=dZTNiMT&z=1688579572 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://valoria.ro
date: Fri, 18 Nov 2022 20:44:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| valoria.ro/?wc-ajax=get_refreshed_fragments&elementor_page_id=0 | 92.114.98.191 | 200 OK | 1.2 kB |
URL HTTP/2valoria.ro/?wc-ajax=get_refreshed_fragments&elementor_page_id=0 IP92.114.98.191:0
File typeJSON data\012- , ASCII text, with very long lines (1151), with no line terminators Hash72505e905d48d8b08d14b5f8a69d8af0 4ec5c7ef501e8b1ff90d990d3fb038da73211375 6665bc99edf342992e027cb64ca996de4829a1c6416c380f2c229e6561b393ba
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
POST /?wc-ajax=get_refreshed_fragments&elementor_page_id=0 HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://valoria.ro/ieuq/?qbot.zip
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 20:44:31 GMT
content-type: application/json; charset=UTF-8
content-length: 1151
x-powered-by: PHP/7.4.33
x-ua-compatible: IE=edge
access-control-allow-origin: https://valoria.ro
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
x-litespeed-tag: 27f_HTTP.200,27f_HTTP.200
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-litespeed-cache-control: no-cache
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-LM1DRTPZ0X>m=2oeb90&_p=1692997274&gdid=dZTNiMT&cid=1166706498.1668804270&ul=en-us&sr=1280x1024&_s=1&sid=1668804269&sct=1&seg=0&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&dt=Page%20Not%20Found%20-%20Valoria%20Business%20Solutions&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-LM1DRTPZ0X>m=2oeb90&_p=1692997274&gdid=dZTNiMT&cid=1166706498.1668804270&ul=en-us&sr=1280x1024&_s=1&sid=1668804269&sct=1&seg=0&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&dt=Page%20Not%20Found%20-%20Valoria%20Business%20Solutions&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LM1DRTPZ0X>m=2oeb90&_p=1692997274&gdid=dZTNiMT&cid=1166706498.1668804270&ul=en-us&sr=1280x1024&_s=1&sid=1668804269&sct=1&seg=0&dl=https%3A%2F%2Fvaloria.ro%2Fieuq%2F%3Fqbot.zip&dt=Page%20Not%20Found%20-%20Valoria%20Business%20Solutions&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://valoria.ro
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://valoria.ro
date: Fri, 18 Nov 2022 20:44:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| valoria.ro/ieuq/?qbot.zip | 92.114.98.191 | 404 Not Found | 0 B |
URL HTTP/2valoria.ro/ieuq/?qbot.zip IP92.114.98.191:0
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /ieuq/?qbot.zip HTTP/1.1
Host: valoria.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 18 Nov 2022 20:44:30 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-ua-compatible: IE=edge
link: <https://valoria.ro/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 27f_HTTP.404,27f_404,27f_URL.a3fed4e1c8251afc5178d58070fa87a8,27f_,27f_CCSS.7befda9636ba492231eff827c679fbce,27f_MIN.8ef0e8931f9b3f232c317d768e238f2b.css
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=latin-ext&ver=6.1.1 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=latin-ext&ver=6.1.1 IP142.250.74.10:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=latin-ext&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://valoria.ro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 20:44:30 GMT
date: Fri, 18 Nov 2022 20:44:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
0.0.0.0