Report - whitegloveautotulsa.com/

Report Overview

Visited public
2025-03-22 04:31:21
Tags
Submit Tags
URL
whitegloveautotulsa.com/
Finishing URL
whitegloveautotulsa.com/
IP / ASN
192.124.249.80
#30148 SUCURI-SEC
Title
GoDaddy Security - Access Denied

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
img1.wsimg.com	9893	2008-03-17	2012-06-20	2025-03-19	526 B	29 kB	23.36.77.210
cdn.sucuri.net	107164	2009-04-24	2017-01-29	2025-03-18	5.4 kB	402 kB	192.124.249.16
whitegloveautotulsa.com	unknown	unknown	No data	No data	2.1 kB	34 kB	192.124.249.80

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-03-22 04:31:10	high	192.124.249.80	Client IP	ETPRO EXPLOIT_KIT Evil Keitaro Set-Cookie Inbound

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (17)

URL IP Response Size

GET cdn.sucuri.net/css/whitelabel/typography.css?611e1e2

192.124.249.16

200 OK

2.7 kB

URL GET
cdn.sucuri.net/css/whitelabel/typography.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
ASCII text, with very long lines (3039), with no line terminators
Size
2.7 kB (2679 bytes)
Hash
c771d3462d58b9bdf3e9c507e5181016
fce34365bd6f21df53f2d279606b5553967d0e37
0dbcfcf7583e3db955f23499e565a4cc4e4cc69a14636106feb2026894d76318

HTTP Headers

GET /css/whitelabel/typography.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 2679
x-sucuri-id: 19016
x-amz-id-2: 5rIyIABYLLEdNNtWJE6AR+3+x2DiUGTKuaMUH3isyLxUuImW3NqFyHY9/ud6AWHU70DETpuVEE4=
x-amz-request-id: X52F6BM9FBBP463J
last-modified: Wed, 22 May 2024 17:12:04 GMT
x-amz-version-id: PbRvI3IYguyYN4cMMmZslhDrKWJ8f9ET
etag: "b39350ba886b11c1fdc6401c411ffe77"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel.css?611e1e2

192.124.249.16

200 OK

155 kB

URL GET
cdn.sucuri.net/css/whitelabel.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
assembler source, ASCII text, with CRLF, LF line terminators
Size
155 kB (155359 bytes)
Hash
847a381d623d1c6561a4b2b05408921c
6f548a69420b3b2907c80afc22a5c6f18205072a
32c3b6541d209cb806416ba6d36ec2ca9af73eec56ff05c30ef523a28a944a71

HTTP Headers

GET /css/whitelabel.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 155359
x-sucuri-id: 19016
x-amz-id-2: glgCzaEtDvA9I/o03yhIzN9ghlXXW6VvgqA2jbYDWY603dEMtjhZlXlixTmTle9T/3TASPX1R2E=
x-amz-request-id: X520RJS9X7SB03TP
last-modified: Wed, 22 May 2024 17:11:42 GMT
x-amz-version-id: vDHCwhwXBkZx0m5EHqiVAE4F0rC9Rd1G
etag: "847a381d623d1c6561a4b2b05408921c"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel/typography.css?611e1e2

192.124.249.16

200 OK

2.7 kB

URL GET
cdn.sucuri.net/css/whitelabel/typography.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
ASCII text, with very long lines (3039), with no line terminators
Size
2.7 kB (2679 bytes)
Hash
c771d3462d58b9bdf3e9c507e5181016
fce34365bd6f21df53f2d279606b5553967d0e37
0dbcfcf7583e3db955f23499e565a4cc4e4cc69a14636106feb2026894d76318

HTTP Headers

GET /css/whitelabel/typography.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 2679
x-sucuri-id: 19016
x-amz-id-2: 5rIyIABYLLEdNNtWJE6AR+3+x2DiUGTKuaMUH3isyLxUuImW3NqFyHY9/ud6AWHU70DETpuVEE4=
x-amz-request-id: X52F6BM9FBBP463J
last-modified: Wed, 22 May 2024 17:12:04 GMT
x-amz-version-id: PbRvI3IYguyYN4cMMmZslhDrKWJ8f9ET
etag: "b39350ba886b11c1fdc6401c411ffe77"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel/buttons.css?611e1e2

192.124.249.16

200 OK

17 kB

URL GET
cdn.sucuri.net/css/whitelabel/buttons.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type

Size
17 kB (17159 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css/whitelabel/buttons.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 17159
x-sucuri-id: 19016
x-amz-id-2: YWY9iLJajlJfnnL8bsQyJcdOzlxTyD30YKxOs8pSQ5/0hjVwmbGOxO+QlLJW5yYhtgorz14pDes=
x-amz-request-id: X528XRF5X3PV7Q9W
last-modified: Wed, 22 May 2024 17:12:06 GMT
x-amz-version-id: imjAhRv3U5dQPdGgqqYCpC5_OIWqsOmy
etag: "0b3b2003201cfa8f9adc81597b462945"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel/footer.css?611e1e2

192.124.249.16

200 OK

375 B

URL GET
cdn.sucuri.net/css/whitelabel/footer.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
ASCII text, with very long lines (425), with no line terminators
Size
375 B (375 bytes)
Hash
2974e37918b0b9b4e3ddf818501640b7
3bfb19a1c061998aa638360a081dcb0cd2d56055
c2a6009459141ba6f50b3c839de868bc17478dd53755f0cdb8e453878fb87296

HTTP Headers

GET /css/whitelabel/footer.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 375
x-sucuri-id: 19016
x-amz-id-2: 6W9wQfK1YigDR00NC37zrxAa4Txqzo0/UoInA9+Iphc4b6RozV+bbcW25Slzcl7yGUK+pMvQG+c=
x-amz-request-id: X527V6NETHJY2WR6
last-modified: Wed, 22 May 2024 17:12:07 GMT
x-amz-version-id: ajTfoyqCLF3eKNVxPtRkF20pD1JnPkoD
etag: "90ca6b3844a120600ae787cd067cd3a7"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET whitegloveautotulsa.com/

192.124.249.80

403 Forbidden

2.6 kB

URL User Request GET
whitegloveautotulsa.com/
IP
192.124.249.80:443
ASN
#30148 SUCURI-SEC

Certificate
IssuerGoDaddy.com, Inc.
Subjectwhitegloveautotulsa.com
Fingerprint72:F2:49:A4:E8:80:EF:8A:40:05:2F:F1:2F:47:08:49:72:70:E0:4C
ValiditySat, 22 Mar 2025 02:55:46 GMT - Fri, 20 Jun 2025 02:55:46 GMT

File type
HTML document, ASCII text, with very long lines (2731), with no line terminators
Size
2.6 kB (2601 bytes)
Hash
f86cd10d244bb295ed7eeb5bed060198
b080597949adeb72f57c315bde5ad257d26c7876
7ee9da0aa4a1d75bfd4953a9f6534e7be324c1e84fb438927e8fbf34fe87e6a1

HTTP Headers

GET / HTTP/1.1
Host: whitegloveautotulsa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sat, 22 Mar 2025 04:30:59 GMT
content-type: text/html
x-sucuri-id: 19030
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
x-sucuri-block: BLACK02
server: Sucuri/Cloudproxy
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/fonts.css

192.124.249.16

200 OK

1.9 kB

URL GET
cdn.sucuri.net/css/fonts.css
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
Unicode text, UTF-8 text, with very long lines (1937), with no line terminators
Size
1.9 kB (1901 bytes)
Hash
33f447fa0eae66b651050eaadd49910d
d687ed7e159f33dbf04817316ae71d4185956a97
8737d8d618e9a63f197b2a03d318e939175709b6959d0ad4c9e6ffda366b734d

HTTP Headers

GET /css/fonts.css HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 1901
x-sucuri-id: 19016
x-amz-id-2: zfxDFgKqG2jPBiUMPr+D6Xt7oVkn/KP259vzgi23zvy04ecIuVyuhTUszaV0uTUju+1sSaxezZg=
x-amz-request-id: X52E3YKAE1K8NW96
last-modified: Wed, 22 May 2024 17:11:41 GMT
x-amz-version-id: WK2fZsIAZ5aZ5jIyj10WYYmTgsYAtQA8
etag: "a23848b6251d1349f3fa4eb26d808316"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel.css?611e1e2

192.124.249.16

200 OK

155 kB

URL GET
cdn.sucuri.net/css/whitelabel.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
assembler source, ASCII text, with CRLF, LF line terminators
Size
155 kB (155359 bytes)
Hash
847a381d623d1c6561a4b2b05408921c
6f548a69420b3b2907c80afc22a5c6f18205072a
32c3b6541d209cb806416ba6d36ec2ca9af73eec56ff05c30ef523a28a944a71

HTTP Headers

GET /css/whitelabel.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 155359
x-sucuri-id: 19016
x-amz-id-2: glgCzaEtDvA9I/o03yhIzN9ghlXXW6VvgqA2jbYDWY603dEMtjhZlXlixTmTle9T/3TASPX1R2E=
x-amz-request-id: X520RJS9X7SB03TP
last-modified: Wed, 22 May 2024 17:11:42 GMT
x-amz-version-id: vDHCwhwXBkZx0m5EHqiVAE4F0rC9Rd1G
etag: "847a381d623d1c6561a4b2b05408921c"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/fonts.css

192.124.249.16

200 OK

1.9 kB

URL GET
cdn.sucuri.net/css/fonts.css
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
Unicode text, UTF-8 text, with very long lines (1937), with no line terminators
Size
1.9 kB (1901 bytes)
Hash
33f447fa0eae66b651050eaadd49910d
d687ed7e159f33dbf04817316ae71d4185956a97
8737d8d618e9a63f197b2a03d318e939175709b6959d0ad4c9e6ffda366b734d

HTTP Headers

GET /css/fonts.css HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 1901
x-sucuri-id: 19016
x-amz-id-2: zfxDFgKqG2jPBiUMPr+D6Xt7oVkn/KP259vzgi23zvy04ecIuVyuhTUszaV0uTUju+1sSaxezZg=
x-amz-request-id: X52E3YKAE1K8NW96
last-modified: Wed, 22 May 2024 17:11:41 GMT
x-amz-version-id: WK2fZsIAZ5aZ5jIyj10WYYmTgsYAtQA8
etag: "a23848b6251d1349f3fa4eb26d808316"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET whitegloveautotulsa.com/wp-content/uploads/wg-favicon.png

192.124.249.80

200 OK

13 kB

URL GET
whitegloveautotulsa.com/wp-content/uploads/wg-favicon.png
IP
192.124.249.80:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subjectwhitegloveautotulsa.com
Fingerprint72:F2:49:A4:E8:80:EF:8A:40:05:2F:F1:2F:47:08:49:72:70:E0:4C
ValiditySat, 22 Mar 2025 02:55:46 GMT - Fri, 20 Jun 2025 02:55:46 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
13 kB (13147 bytes)
Hash
3c32f59f219f1df457c1d9316da2880b
e4f3867846150ab8c3a9b7ba55515b0c28af8f75
963fc1e398b428e9098f76ec6d99e835a9445c3a208d9e7b3cdfc720282f8f8e

HTTP Headers

GET /wp-content/uploads/wg-favicon.png HTTP/1.1
Host: whitegloveautotulsa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://whitegloveautotulsa.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=7v5no57in8m7fupjsa4jkbs8fm; my_session_cookie=7v5no57in8m7fupjsa4jkbs8fm; _subid=1sjos4f496r4j; dcb76=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQ2XCI6MTc0MjYxNzg2NH0sXCJjYW1wYWlnbnNcIjp7XCIxMlwiOjE3NDI2MTc4NjR9LFwidGltZVwiOjE3NDI2MTc4NjR9In0.qLqyz0_fuZ9GPnuc5JhTFmpvjRL6uZWATak0G6H3B6U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:06 GMT
content-type: image/png
content-length: 13147
x-sucuri-id: 19030
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 07 Apr 2022 14:00:53 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
server: Sucuri/Cloudproxy
x-sucuri-cache: MISS
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET whitegloveautotulsa.com/

192.124.249.80

403 Forbidden

2.6 kB

URL User Request GET
whitegloveautotulsa.com/
IP
192.124.249.80:80
ASN
#30148 SUCURI-SEC

File type
HTML document, ASCII text, with very long lines (2731), with no line terminators
Size
2.6 kB (2601 bytes)
Hash
637b625eafc51bf2ea693d1608fd776d
126d842f754395c8b671a5214440de95030e8dde
20a7da2b2fa47b59abc274e558ddd4be6d734723412497f6470d6437c39df7e2

HTTP Headers

GET / HTTP/1.1
Host: whitegloveautotulsa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Sat, 22 Mar 2025 04:31:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Sucuri-ID: 19030
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Sucuri-Block: BLACK02
Server: Sucuri/Cloudproxy

GET cdn.sucuri.net/css/whitelabel/header.css?611e1e2

192.124.249.16

200 OK

20 kB

URL GET
cdn.sucuri.net/css/whitelabel/header.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
ASCII text, with very long lines (5345), with CRLF line terminators
Size
20 kB (20230 bytes)
Hash
a67e26a3ce458372747a60f7c2f51691
67c66f1446be43f41c88a6cf5a8426d8a0ef955a
5471b2e038605f531ce9978cfb52bdba55ebccc1924a03d9deaa5cc1ff8aeae4

HTTP Headers

GET /css/whitelabel/header.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 20230
x-sucuri-id: 19016
x-amz-id-2: +nr6+STIp5eYdBhG3X209PPnZAEXRXfqDvfPvH9Jrt9a0akYnKKliN5sZUBOaz8Ycc0XaWK9EL0=
x-amz-request-id: X52FPA6ZM5XXFD50
last-modified: Wed, 22 May 2024 17:12:07 GMT
x-amz-version-id: Eo7qwsEr9TGgpVL9IkJcexfJA9eFt3g5
etag: "a67e26a3ce458372747a60f7c2f51691"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel/header.css?611e1e2

192.124.249.16

200 OK

20 kB

URL GET
cdn.sucuri.net/css/whitelabel/header.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
ASCII text, with very long lines (5345), with CRLF line terminators
Size
20 kB (20230 bytes)
Hash
a67e26a3ce458372747a60f7c2f51691
67c66f1446be43f41c88a6cf5a8426d8a0ef955a
5471b2e038605f531ce9978cfb52bdba55ebccc1924a03d9deaa5cc1ff8aeae4

HTTP Headers

GET /css/whitelabel/header.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 20230
x-sucuri-id: 19016
x-amz-id-2: +nr6+STIp5eYdBhG3X209PPnZAEXRXfqDvfPvH9Jrt9a0akYnKKliN5sZUBOaz8Ycc0XaWK9EL0=
x-amz-request-id: X52FPA6ZM5XXFD50
last-modified: Wed, 22 May 2024 17:12:07 GMT
x-amz-version-id: Eo7qwsEr9TGgpVL9IkJcexfJA9eFt3g5
etag: "a67e26a3ce458372747a60f7c2f51691"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET img1.wsimg.com/ux/fonts/1.4/woff2/Boing-Bold.woff2

23.36.77.210

200 OK

28 kB

URL GET
img1.wsimg.com/ux/fonts/1.4/woff2/Boing-Bold.woff2
IP
23.36.77.210:443
ASN
#20940 Akamai International B.V.

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintEA:61:02:4F:B7:92:44:AD:09:4C:03:D9:59:C6:B7:3B:E5:1E:ED:F3
ValidityThu, 19 Sep 2024 21:02:42 GMT - Tue, 21 Oct 2025 21:02:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28220, version 6.131
Size
28 kB (28220 bytes)
Hash
22cf6a168a01f8976174639a3a7cb90f
766d2b985aa4dba7d46184b2e8b5ffd4f1ff7c36
49f6c1034e3661e29c5de12d1c97e489565c7d55fec513c2668a57329367e082

HTTP Headers

GET /ux/fonts/1.4/woff2/Boing-Bold.woff2 HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://whitegloveautotulsa.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.sucuri.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/font-woff2
last-modified: Wed, 04 May 2016 22:29:16 GMT
accept-ranges: bytes
etag: "59c6cd6454a6d11:0"
content-length: 28220
cache-control: max-age=31536000
expires: Sun, 22 Mar 2026 04:31:00 GMT
date: Sat, 22 Mar 2025 04:31:00 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET cdn.sucuri.net/css/whitelabel/buttons.css?611e1e2

192.124.249.16

200 OK

17 kB

URL GET
cdn.sucuri.net/css/whitelabel/buttons.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type

Size
17 kB (17159 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css/whitelabel/buttons.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 17159
x-sucuri-id: 19016
x-amz-id-2: YWY9iLJajlJfnnL8bsQyJcdOzlxTyD30YKxOs8pSQ5/0hjVwmbGOxO+QlLJW5yYhtgorz14pDes=
x-amz-request-id: X528XRF5X3PV7Q9W
last-modified: Wed, 22 May 2024 17:12:06 GMT
x-amz-version-id: imjAhRv3U5dQPdGgqqYCpC5_OIWqsOmy
etag: "0b3b2003201cfa8f9adc81597b462945"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET whitegloveautotulsa.com/favicon.ico

192.124.249.80

302 Found

13 kB

URL GET
whitegloveautotulsa.com/favicon.ico
IP
192.124.249.80:80
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/

File type

Size
13 kB (13147 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	high	ETPRO EXPLOIT_KIT Evil Keitaro Set-Cookie Inbound

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: whitegloveautotulsa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sat, 22 Mar 2025 04:31:05 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Sucuri-ID: 19030
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Link: <https://whitegloveautotulsa.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Pragma: no-cache
Set-Cookie: PHPSESSID=7v5no57in8m7fupjsa4jkbs8fm; path=/
my_session_cookie=7v5no57in8m7fupjsa4jkbs8fm; path=/
_subid=1sjos4f496r4j; expires=Sun, 23 Mar 2025 04:31:04 GMT; Max-Age=86400; path=/; domain=.whitegloveautotulsa.com
dcb76=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQ2XCI6MTc0MjYxNzg2NH0sXCJjYW1wYWlnbnNcIjp7XCIxMlwiOjE3NDI2MTc4NjR9LFwidGltZVwiOjE3NDI2MTc4NjR9In0.qLqyz0_fuZ9GPnuc5JhTFmpvjRL6uZWATak0G6H3B6U; expires=Sun, 23 Mar 2025 04:31:04 GMT; Max-Age=86400; path=/; domain=.whitegloveautotulsa.com
Location: https://whitegloveautotulsa.com/wp-content/uploads/wg-favicon.png
Vary: Accept-Encoding
Server: Sucuri/Cloudproxy
X-Sucuri-Cache: MISS
Alt-Svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000

GET cdn.sucuri.net/css/whitelabel/footer.css?611e1e2

192.124.249.16

200 OK

375 B

URL GET
cdn.sucuri.net/css/whitelabel/footer.css?611e1e2
IP
192.124.249.16:443
ASN
#30148 SUCURI-SEC

Requested by
http://whitegloveautotulsa.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.sucuri.net
Fingerprint6E:21:81:E4:E7:27:BD:1B:3A:16:52:87:DA:CB:01:6F:AB:B8:CB:5A
ValidityTue, 10 Sep 2024 13:53:56 GMT - Sun, 12 Oct 2025 13:53:56 GMT

File type
ASCII text, with very long lines (425), with no line terminators
Size
375 B (375 bytes)
Hash
2974e37918b0b9b4e3ddf818501640b7
3bfb19a1c061998aa638360a081dcb0cd2d56055
c2a6009459141ba6f50b3c839de868bc17478dd53755f0cdb8e453878fb87296

HTTP Headers

GET /css/whitelabel/footer.css?611e1e2 HTTP/1.1
Host: cdn.sucuri.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://whitegloveautotulsa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Mar 2025 04:31:00 GMT
content-type: text/css
content-length: 375
x-sucuri-id: 19016
x-amz-id-2: 6W9wQfK1YigDR00NC37zrxAa4Txqzo0/UoInA9+Iphc4b6RozV+bbcW25Slzcl7yGUK+pMvQG+c=
x-amz-request-id: X527V6NETHJY2WR6
last-modified: Wed, 22 May 2024 17:12:07 GMT
x-amz-version-id: ajTfoyqCLF3eKNVxPtRkF20pD1JnPkoD
etag: "90ca6b3844a120600ae787cd067cd3a7"
server: Sucuri/Cloudproxy
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (17)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate