firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 3f17af4e8a1739eda4a518039f4892f9
c3feba08ae7e8f57e0fe9bcd2ebedea6bda67cbb
c485b09cad08b5233fe8753682faf59219fe0d18fcc34d90dc88fb0971295f5f
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 12 Oct 2022 03:49:13 GMT
Expires: Wed, 12 Oct 2022 04:31:39 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QEfwyO8LX25IvJQ4XGcqbl7xBazc05xLxtqEzad0wB9tfdL_F7CoWA==
Age: 3348
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0602913f3d432ffbfaa654440972ee1
e5aaf31749e65875fd840091f9a3bba641de413d
5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4599
Expires: Wed, 12 Oct 2022 06:01:40 GMT
Date: Wed, 12 Oct 2022 04:45:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ceb45134349ef6afcb5b4bb730678041
15dc3ecb18e30e77cd7c694dd237bff9be583e7a
a39e0827fa31257562bb681e312ec2944a862e9ad4e568a803f6e09e994a6018
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A39E0827FA31257562BB681E312EC2944A862E9AD4E568A803F6E09E994A6018"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4581
Expires: Wed, 12 Oct 2022 06:01:22 GMT
Date: Wed, 12 Oct 2022 04:45:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QZUi107cjZpNTm5tK+GvCL3jKZbmIJn8vOoYRRktx/CtccOy/9FrYFH7ULBSTQJX5+9j2y9R2GLUuIGXttURFg==
x-amz-request-id: K3K12YDWG8EGEN9P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 12 Oct 2022 04:33:12 GMT
age: 709
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 12 Oct 2022 04:45:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 06a35657b74426d166365e6c26c10a4d
cf8c52cb163c10d0583939111ab90fa103aeee66
7a405bcb054f1c6adaee60e56946e7939ec3778313f19dc0d01e82a35bc3221c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7A405BCB054F1C6ADAEE60E56946E7939EC3778313F19DC0D01E82A35BC3221C"
Last-Modified: Mon, 10 Oct 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21576
Expires: Wed, 12 Oct 2022 10:44:37 GMT
Date: Wed, 12 Oct 2022 04:45:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 12 Oct 2022 04:29:41 GMT
Expires: Wed, 12 Oct 2022 04:43:20 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rAFtLlYEAFwtcvSNJZ0w1Z7V5GGZ2lXKHpvReeUinXab-7AQJMWtGw==
Age: 920
ocsp.digicert.com/
200 OK 471 B IP
Hash 34c15fee665f03aab24038618bb2d9a7
6b90ea5a496581b83daf1764938d1db1a5a32bb4
93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4241
Cache-Control: max-age=102750
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:01 GMT
Etag: "6345241a-1d7"
Expires: Thu, 13 Oct 2022 09:17:31 GMT
Last-Modified: Tue, 11 Oct 2022 08:06:50 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9rlfJYksVM1T2y3aleyJpQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: dwQ/1EhUCWgYxB15o1SjQIcG8HY=
digiterati.com/etuu/robquleiod
301 Moved Permanently 0 B URL HTTP/2 digiterati.com/etuu/robquleiod
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /etuu/robquleiod HTTP/1.1
Host: digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
set-cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=cb187f2c35ffa7844b64a9c619223068%7C%7C1665722701%7C%7C7ffc2b168df11eb2a30a9f207016794f; expires=Fri, 14-Oct-2022 04:45:01 GMT; Max-Age=172799; path=/; secure
mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; expires=Wed, 09-Nov-2022 04:45:02 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict
_wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; expires=Wed, 12-Oct-2022 05:45:02 GMT; Max-Age=3600; path=/; secure
location: https://www.digiterati.com/etuu/robquleiod
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 12 Oct 2022 04:45:01 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4793
Expires: Wed, 12 Oct 2022 06:04:56 GMT
Date: Wed, 12 Oct 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4793
Expires: Wed, 12 Oct 2022 06:04:56 GMT
Date: Wed, 12 Oct 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4793
Expires: Wed, 12 Oct 2022 06:04:56 GMT
Date: Wed, 12 Oct 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4793
Expires: Wed, 12 Oct 2022 06:04:56 GMT
Date: Wed, 12 Oct 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4793
Expires: Wed, 12 Oct 2022 06:04:56 GMT
Date: Wed, 12 Oct 2022 04:45:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb930815f-f06a-480e-ad16-9bd92f97d432.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb930815f-f06a-480e-ad16-9bd92f97d432.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6de5ae4e13adfda899c6d9d7f15c2408
42646745dfbd35823e010a1eaff72a0d56b57ea3
e5381990d47e66587b077eca53ec003bb97e7eb883eec4ab70552ebc967e14a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb930815f-f06a-480e-ad16-9bd92f97d432.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7508
x-amzn-requestid: 3822356e-e088-4d9c-ab80-cdb8ea8a4e80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BUbHhvoAMFjPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e282-5917bd6a45be8040069fd16e;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:39:14 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Dp9CKBwS980UhMRxeo3Oio0WxcRDyEEqDd45udoojUyArbit_i5APA==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:09:04 GMT
age: 23759
etag: "42646745dfbd35823e010a1eaff72a0d56b57ea3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faa580f19-9ce4-4ea0-91f9-d7fcb6a24f43.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faa580f19-9ce4-4ea0-91f9-d7fcb6a24f43.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94619859b98c7a9e8a24d9a74f192ffb
4ace684ada303aa2a23dec9ed51e90b3921e0d15
07ff41158f55dd10de3acdb386461abae3025d4e2c6db1573a40817c46870e57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faa580f19-9ce4-4ea0-91f9-d7fcb6a24f43.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12689
x-amzn-requestid: c0793638-91d1-4f65-97d0-cf07714db2a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BPwFUXoAMFvOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e264-7c141681367cfc2a2794846b;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R3vaLmXoYdRu7gPToThzkIhnUIUr5afnJiJo8xtnZJvqwyG57GU7zA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:48:30 GMT
age: 24993
etag: "4ace684ada303aa2a23dec9ed51e90b3921e0d15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e9aa9808428e5fd81ac9d61d6f7c708
3a8d76badce50dd98938885082dcb6e30363ae88
d8f7c48a1cbe04af2f7e0455d1ef7af9b63506b9ae343ebf14ece8689bb06bf6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11800
x-amzn-requestid: 5f2ce4dd-0df8-4df7-a12d-e6fffd622752
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZnTQHGADIAMFXfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f98cd-5044665325e5d64975c1ff0c;Sampled=0
x-amzn-remapped-date: Fri, 07 Oct 2022 03:11:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZKsi1hYgZdJQNWpphaMVLfpg69dC93J575Y2RsOzFV3ZzBb6x-nrew==
via: 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:42:26 GMT
age: 25357
etag: "3a8d76badce50dd98938885082dcb6e30363ae88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb346a582-22c0-4785-8cff-aa89fd5eefb6.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb346a582-22c0-4785-8cff-aa89fd5eefb6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f42ff23003d006daab01a5317a8231a7
918aac143d82bf543ee326bd26a7c256ffb2d7de
f3d97dd5f258fa504cd4e2274e702126f521e11a903cb23974809563b6f0e9cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb346a582-22c0-4785-8cff-aa89fd5eefb6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11116
x-amzn-requestid: 56e8fcb1-77ce-4b86-bc89-d0c68d564539
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3AkiGkvoAMFmiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e150-1c5c41db4c614cd766b82ef4;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:34:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0fGlW3iuuVzY6_VMl3MpX9PoqzpY-CoNPlJey79E9_NQXkLj3crcVg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:58:41 GMT
age: 24382
etag: "918aac143d82bf543ee326bd26a7c256ffb2d7de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5d5a2a4-e4d4-4f11-8cb5-c320f1078b2f.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5d5a2a4-e4d4-4f11-8cb5-c320f1078b2f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f78379e6bde371b492c950402bcc39e
53a7502d8932c515aa09055c5cf8f2d2242e4398
241016bbd3cebc009f63dff2773c1c7fdb68fa941ab62b368d5e023b9155fa37
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5d5a2a4-e4d4-4f11-8cb5-c320f1078b2f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5252
x-amzn-requestid: b4ef9c4f-7ca4-42c9-a928-b0b8aa3cc695
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BUaEtBoAMF8Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e282-455619be605fa91977c66df7;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:39:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: u8SRxkVzSO3pnQB_FibQBfwzvJ2uiT9YQzQI4_ZVMxgdED9Zsir8qQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:09:04 GMT
age: 23759
etag: "53a7502d8932c515aa09055c5cf8f2d2242e4398"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6de788-8d97-4f94-bc1e-5e186ab0f084.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6de788-8d97-4f94-bc1e-5e186ab0f084.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5935f664339bfd6b3a680e0293a85206
6939666e52ea22d84546b37908a05205a7e86114
6afabffe02d71e1cdad6868d9c372627c6248511d4320f6dd1ad984e2212d162
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6de788-8d97-4f94-bc1e-5e186ab0f084.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10735
x-amzn-requestid: 5c584c89-219f-49a8-8a3a-ce572550d7a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BPMEqmIAMFf1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e261-557d611664d69d6a678a40da;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: czian2AC4IAvl1WCtLUpKr6yEw_qUaWLqRiV4FmtfolTF6uYihOP3Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:48:15 GMT
age: 25008
etag: "6939666e52ea22d84546b37908a05205a7e86114"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash befa75dbbe9d5dfa501f9c1f03b7cdfa
73814c47bdcd6bebffc963b71d0a20fb361fad50
76b8f843416709a64e030343fbea3e04b9ee9faf2872ddba29f7c8ea28041e28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=AW-603227663
200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-603227663
IP
File type ASCII text, with very long lines (1934)
Hash 9dcad2a74ac1dc464516c58cf4b41f8d
1d885fdfd330963c30252dade35bf178a2cb75b7
ff7bacad97ffb30a1a679479aa38cbb5d7f6a8d201303c45c232b299381af79d
GET /gtag/js?id=AW-603227663 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 12 Oct 2022 04:45:03 GMT
expires: Wed, 12 Oct 2022 04:45:03 GMT
cache-control: private, max-age=900
last-modified: Wed, 12 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46727
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-64245360-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-64245360-1
IP
File type ASCII text, with very long lines (1975)
Hash 32fabbcf196edfc5ec3d1a43eedd871d
7fe9147103e7058112cef0a297fb13fca9cab947
2ddcf89d7daba61f59697103ff87e57d0ad3cfdc0871f772bac6f52869f5c678
GET /gtag/js?id=UA-64245360-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 12 Oct 2022 04:45:03 GMT
expires: Wed, 12 Oct 2022 04:45:03 GMT
cache-control: private, max-age=900
last-modified: Wed, 12 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42472
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash befa75dbbe9d5dfa501f9c1f03b7cdfa
73814c47bdcd6bebffc963b71d0a20fb361fad50
76b8f843416709a64e030343fbea3e04b9ee9faf2872ddba29f7c8ea28041e28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.digiterati.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.4.3
200 OK 1.6 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.4.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4933), with no line terminators
Hash 971cfc62ecc92ebe1174a2c80671a10f
86989b6ba38041063eab75516aa10bfc3fc9a55f
e51fd87d27a0dedfe4afb52aab0d8708d369be1e16ff09b90245c145bd8847ba
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.4.3 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1637
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/3r-elementor-timeline-widget/assets/css/style.css?ver=6.0.2
200 OK 1.3 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/3r-elementor-timeline-widget/assets/css/style.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 58bcee4def683f3034ce0ffb953c7028
0d739522a83de0531ee99a4ecf876a98b7a1bdc4
3783c3188021c861d2ac255759062d9e9487f5d3cc97bd9628a523e26ba35515
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/3r-elementor-timeline-widget/assets/css/style.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1277
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 17 kB URL HTTP/2 www.digiterati.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 13 Jul 2022 00:01:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.digiterati.com/wp-content/plugins/wp-show-more/wpsm-style.css?ver=6.0.2
200 OK 167 B URL HTTP/2 www.digiterati.com/wp-content/plugins/wp-show-more/wpsm-style.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash dff4d3e7a0039fa158eb5549cfd437b0
15d78ecd52010745dc7601b6f23d88f158b33204
ba096bd8f16f5ec36ad6c2b20616f3b9bd3913beae89b55a4742547d185a8dec
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/wp-show-more/wpsm-style.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 167
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/core/reset.css?ver=6.0.2
200 OK 325 B URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/core/reset.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b30a89f7d3d8b4dbdd93e47cd405ac54
8c539b079715e1d822db5a836447624c845d53e8
392fbf40f0f793765c11eb4ed40610057e75a3a5311a5b43c8efe3223342c881
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/core/reset.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 325
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.5.1
200 OK 3.1 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (17809), with no line terminators
Hash 97f3e7860b3e0d99f3c0327b0045363a
885af5049143e765b7fd0f3a0a860613b05d12d1
ff05d291dd422f8bee80e816eb1480c67fb3e0d6071bebd8f04c86de87a70080
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.5.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3086
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.5.1
200 OK 13 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Hash ebad0134e03078f66fa63f2a89d17d81
bccc743a9a5d015e06c7f622b4687142b2cd2fe5
42e7dbb97a0b72fa2bc44035d713982a7ff653cb63c0a7ef09e1fd4fe69c4d14
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.5.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13255
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/social-pug/assets/dist/style-frontend-pro.1.20.1.css?ver=1.20.1
200 OK 15 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/social-pug/assets/dist/style-frontend-pro.1.20.1.css?ver=1.20.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Hash ed347f03347788c77bd11036cd4615b7
a8b97667817663aa893712d720e3a3e53b4f3d14
45cf531c9e8359f77c5612a6eeb0fa2d584ac8681949bf1986801c5b8eb0de71
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/social-pug/assets/dist/style-frontend-pro.1.20.1.css?ver=1.20.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15215
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/modules/kirki/assets/css/kirki-styles.css?ver=3.0.21
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/modules/kirki/assets/css/kirki-styles.css?ver=3.0.21
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/modules/kirki/assets/css/kirki-styles.css?ver=3.0.21 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
content-length: 0
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.1.5
200 OK 547 B URL HTTP/2 www.digiterati.com/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.1.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8a6ea223da0b6c435cf28cdbd5b334f9
30c9658633c1233fe698084c48601c570eb175d1
708a816a722b7f2f240f925dfe7f685e7b0d663533784232295fa675c4a788e7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/cf7-conditional-fields/style.css?ver=2.1.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 547
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.digiterati.com/wp-content/plugins/learnpress/assets/css/widgets.min.css?ver=4.1.6.5
200 OK 2.1 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/learnpress/assets/css/widgets.min.css?ver=4.1.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (12943), with no line terminators
Hash 0e5cf9466edd5020fdeaa212087274e5
6b47c83d86ee8848cad6d743f3a6b3537b8a204b
d2abe4673ac0ab7585f0135de1a7118285ff1191c233aa16a19daa421032b026
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/learnpress/assets/css/widgets.min.css?ver=4.1.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2051
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14
200 OK 2.5 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5092), with no line terminators
Hash 793aed4abaceb0925e60458c8c42d980
6371ef087dee13724484a6cca1feda59c061644e
b43746949f5740fbf14e40489cb2bdee809c5a9d0954a0cf0982a3b4e90467af
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/tablepress/css/default.min.css?ver=1.14 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2462
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/core/wordpress.css?ver=6.0.2
200 OK 1.8 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/core/wordpress.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 250be13643af94406ebc6930358d0636
b710301de96c904b9d22dfa4220a983627b2db6a
11e9e0ce841db44b48779f3c2228216aa2a7556ccd3a0cb942a614474e157739
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/core/wordpress.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1761
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife-child/style.css?ver=6.0.2
200 OK 2.0 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife-child/style.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (869)
Hash b128d3647638590437de25779e603dec
3f51a878d90b2f030e30d6602cfeed720f5a142b
ad1b778049527c5fd3c9c25e15b7c6992c0f1ce3f9711157a952c6596187f575
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife-child/style.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1959
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.5.3
200 OK 3.9 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1577)
Hash 0de3f234bf5adf709c64d6a81701e107
ec76e30709d2ac94c86121529768c54b84943872
c67075988b28f06061348cebb275f465c608e141f9a00b50c5e4824f57ed10f3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.5.3 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3861
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.3 kB URL HTTP/2 www.digiterati.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 07:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/themify-icons.css?ver=1.9
200 OK 2.9 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/themify-icons.css?ver=1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash fe393a25f075c45c6dfb7c337ec2cddf
38e6d82e1a965e5a8ea58255a30d851f22e532ae
dad89706fe38694fb8bc500be8434b74b1017d2e3194e4bad4575849a76b752b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/themify-icons.css?ver=1.9 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2876
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/menus/leftalignmenu.css?ver=6.0.2
200 OK 511 B URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/menus/leftalignmenu.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 66d8f2f7e94a9435fb342f1e3aed4c15
561cf8cf846eec5c9c90c3b8671736db741ce78d
a70258b0a1e1e3c143edd8744c1a7cdd98bd1ee5b047ef63eac8f80c48612c4a
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/menus/leftalignmenu.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 511
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1
409 Conflict 83 B URL HTTP/2 www.digiterati.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.2
200 OK 2.2 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8319)
Hash 13cea74ab9f2d81ee9c67bc07d61566f
a049ce2fc7956a960a771a8e11c3a5bb2ded6648
e5b0e22a5e327333cd93f3c6af05beacd5a09c0bb37e4725b5a20276a0c6a61b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 08:51:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2233
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 www.digiterati.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Mar 2021 05:51:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/modulobox.css?ver=6.0.2
200 OK 5.5 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/modulobox.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 030eff352c51c1b46e3f35c47b823d4f
3954760013267930fc37c9c924980283013a02dd
d3c481cca524a9a056a17c9b894e152d2f10264e0cf0c58f81ce259cca92b005
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/modulobox.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5496
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.2
200 OK 5.6 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (13486)
Hash ecc2b5b9b054845d998db03af52d8e64
c9e9fb97732c9cd0617ccfe3c684dbc8bcaa389f
ebad6d9630862a3cf3be2eee07b045cc386307237ef832d1c54eea893233ce38
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 08:51:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5566
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/font-awesome.min.css?ver=6.0.2
200 OK 7.7 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/font-awesome.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (34556)
Hash 6c472923e3a64a1cb3f95a9b57d989ea
d1b8de1a75b4dc81837cbecc0c2b7665c4a7c72a
36cc9f174df75a96495a49dbaa96136d1a19dbc52a181dca5dfe3249ce18c6c8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/font-awesome.min.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7685
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/core/responsive.css?ver=6.0.2
200 OK 14 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/core/responsive.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (436)
Hash e0c560d72d03a3b9f654ffb91d4e8813
f0c18f8ad542a10233fe6230027468b6e6d41748
950f54757929dfef583619604e6275b9e33e7553e5309d4b70a24a2d0221473d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/core/responsive.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13463
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
409 Conflict 83 B URL HTTP/2 www.digiterati.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.9.6
200 OK 2.1 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.9.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5478), with no line terminators
Hash 478a9d1e6c97f489b9db4126dae3ba44
4736ecd028f46be1c0ebcfa5efcc8eb30c9b2fa9
0be3c5d9c6d79b994412d3ab7a12e56e30b9d2af93a4bbfa25e9dff47445ae11
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.9.6 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2096
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.6.5
200 OK 1.6 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (13766)
Hash 4cf526fef9feb43362a2a5076ad14e57
b3eed0c54eaeeba92e4785f8f992b1bcd56299a9
4c14f2f979625a6be910c7f5ce6f6d43de458fb2f40806f5728a752a33d0d80d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1608
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/elementor/css/post-44.css?ver=1660573253
200 OK 3.3 kB URL HTTP/2 www.digiterati.com/wp-content/uploads/elementor/css/post-44.css?ver=1660573253
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26026), with no line terminators
Hash 914d2b16fb4c013461aa03eeba7d519c
125a00a7a64d7dd1696c7196a7eeeb7391877bce
8b5c9c3570a46489b8430e7c00c5c24ff26608cc61b158a2fa45ccfcf02642d0
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-44.css?ver=1660573253 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 15 Aug 2022 14:20:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3321
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.7 kB URL HTTP/2 www.digiterati.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6475), with no line terminators
Hash 45bd1d6f7fc3a4069fc6fd400b90c961
903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 07:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2675
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/flickity.css?ver=6.0.2
200 OK 835 B URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/flickity.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash c0fb6e7c3d4efeb027d850b883502843
c27c516069ee56df850e1a7e8cd91017ec2d7802
b746a249caf141bc2921f46d628af5e519eb0608577ea92b724ecdd39d1e77f8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/css/flickity.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 835
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/elementor/css/post-5553.css?ver=1660384296
200 OK 435 B URL HTTP/2 www.digiterati.com/wp-content/uploads/elementor/css/post-5553.css?ver=1660384296
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1331), with no line terminators
Hash bb485f3f9e19f5e1686e431cdc04b5e4
8496797a0938ed5f539bc25cbc354191e27f6e8f
67aa64f3ddc7b2dd267ca8393ffcbf57e796cebd674c4497aa76a6e73ac17e61
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-5553.css?ver=1660384296 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Aug 2022 09:51:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 435
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 309 B URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 309
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.5.1
200 OK 4.0 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9139)
Hash 5f3c95f97f566ce33b859d6b874d116d
e47be9178d33d8d8eefda83c853b560aaed71413
a0cea478b83a24f0c90bfaf776ed62fe8747395838a92d8c9f06ceb79b3e5918
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.5.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3957
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 9.2 kB URL HTTP/2 www.digiterati.com/wp-includes/js/masonry.min.js?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (23966)
Hash 2a730dafa34e6ff81513d31e486cdbdb
1fce17d256f67ae086d74092a03006997d9b0add
7a5fd36a453a3a7471fa93b8169579f9a98e2df7a262c44d28d3de41a0f7ae1c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Oct 2020 13:38:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9216
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/elementor/css/post-132.css?ver=1660386562
200 OK 2.0 kB URL HTTP/2 www.digiterati.com/wp-content/uploads/elementor/css/post-132.css?ver=1660386562
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14302), with no line terminators
Hash bd0dd2f5e0ec8aefb65597b38686144f
3b051997659f8cab204197e105f880367d5b5551
787e4f87adfd76996f1f39e87d5e2be17e3a19b64d1974999eb4ce3c0a68db88
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-132.css?ver=1660386562 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Aug 2022 10:29:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2010
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/dotlife-elementor-responsive.css?ver=6.0.2
200 OK 7.7 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/dotlife-elementor-responsive.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type assembler source, ASCII text, with very long lines (441)
Hash 4dcb8e23fac8da790a45272cbfa931a6
1533f520b4ee04076a5cc7df10a66a94c0287a7f
569363dcfec24f29690b6f1a31df4dfac2bfbbacc3330340108f35257ad11545
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/css/dotlife-elementor-responsive.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7744
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
200 OK 308 B URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/justifiedGallery.css?ver=6.0.2
200 OK 768 B URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/justifiedGallery.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 3413c24b53a1fc432af19660ac70fa9d
14261dbaadee746f9f86d8247946000e9a14db09
438a69ade21444f69be137443ef53a6a0183b55a7e4b7e456d9f9acbd9087dc0
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/css/justifiedGallery.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 768
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
200 OK 4.0 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19082)
Hash 1a51c193793d105fc6aaddfc3bc05349
238e509973276daa145be273af1aba0fbb3801bf
69e8578f795564941f826ab314ab57c83da7fb6ca7d9221c8df5f1e9081ae6e3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3978
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.5
200 OK 3.0 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/learnpress/assets/src/css/vendor/font-awesome-5.min.css?ver=4.1.6.5
200 OK 12 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/learnpress/assets/src/css/vendor/font-awesome-5.min.css?ver=4.1.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (56746)
Hash 0228964a7c3896648d6a50956a2a827d
913c829497d1e768458d7a9fda3c19d86d8d892e
ae1d681cc125c5c8df76ee19a44d8a633ade50227c220c9bc09bb3d7bd12b66d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/learnpress/assets/src/css/vendor/font-awesome-5.min.css?ver=4.1.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12315
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/swiper.css?ver=6.0.2
200 OK 4.6 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/swiper.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1468)
Hash 18be9895ce4ba642205f9ec500ecf802
f324c0ecd33dab29f1bc866192a49987db7d958e
87a275b1080531e41271d8d840bd1ca15a2c2876879dae1f9f4af11abb35022c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/css/swiper.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4565
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 8.3 kB URL HTTP/2 www.digiterati.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash e49f0561a452c9d04fb7d1510a23cc8c
9e8fc2e3129da4fe2790eee565a6478b864bea83
ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 07:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8254
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 13 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.5.1
200 OK 1.0 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1668)
Hash 0bebfb5722cbc8ac04e62aa40698be49
3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.5.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/jquery.sticky-kit.min.js?ver=6.0.2
200 OK 1.3 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/jquery.sticky-kit.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (529)
Hash 2f21c26b5821fc20937fa3894a0079f9
ee902cdcfaa75119b3b6c47918402aa6276e67ed
09d6a7d695e4157760ffb3e7aaa7392c112cda0244696ab43feac15bb6988ea1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/js/jquery.sticky-kit.min.js?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1341
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/etuu/robquleiod
404 Not Found 43 kB URL HTTP/2 www.digiterati.com/etuu/robquleiod
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (28234), with CRLF, LF line terminators
Hash 04e15e8c8580bbcd078000b4c2d31d22
a01787e754abd7bb7656f096bcad79e408ab532b
033f289764cd50244b55e034f3928c8cf45f10cfde9f02cf161af59626a8c0c0
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /etuu/robquleiod HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; expires=Fri, 14-Oct-2022 04:45:02 GMT; Max-Age=172800; path=/; secure
mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; expires=Wed, 09-Nov-2022 04:45:02 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict
_wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; expires=Wed, 12-Oct-2022 05:45:02 GMT; Max-Age=3600; path=/; secure
PHPSESSID=c21eed7461ea52462c5319be65332a5b; path=/
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 12 Oct 2022 04:45:02 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.6.2.01
200 OK 2.5 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.6.2.01
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6854), with no line terminators
Hash f62dc514edd67b648e627c0c34dc6a5e
127fa228af8b68d062f4f194e65433271f79ddba
5622698ac97e755ba520fdfead5904e15333ddf8a93f247fabac0782d9b8f011
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.6.2.01 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2534
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/js/waypoints.min.js?ver=1.9
200 OK 3.1 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/js/waypoints.min.js?ver=1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7808)
Hash 5ec6c0d6c720049d42dac350544dc9e6
0aef4ef2d827db22ea59fa29e4066c5782ffa921
ec3a9624c61a4cbe21a484ae2aec6322583010b3d5eaca597278fc02fd96f37c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/js/waypoints.min.js?ver=1.9 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3128
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.5.1
200 OK 792 B URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2139), with no line terminators
Hash 1ca3f41c13e0027acc45f0601f8b640f
cced34af0c6a59e9cee4229faa66ab39c7031506
d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.5.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/js/core/custom.js?ver=1.9
200 OK 4.5 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/js/core/custom.js?ver=1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash be46b9c754c2d90b5b87225076413177
aa3b7b3b929c6af231b24a1c16279225c3463d85
7a0f14f24b6002fffb16cd9bddf401e7838298707c7be3bd01e154b75f5df5af
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/js/core/custom.js?ver=1.9 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4474
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/js/jquery.stellar.min.js?ver=1.9
200 OK 4.1 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/js/jquery.stellar.min.js?ver=1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12453)
Hash 3525f2201b4f09032255aa580b5ffb6f
00b2c0b860cdc0a4d466575d57b6f3d9b748decc
700f7e51cd1033335fd0dff2838e02e9cbf3fd206eb4635de5fd07ccaa92dfaa
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/js/jquery.stellar.min.js?ver=1.9 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4109
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 2.1 kB URL HTTP/2 www.digiterati.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5477)
Hash f0bd7ad12acdee26cbb2701c1ba3610b
53c5d15129860868b60b74cb010b2c6050a64f69
e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Oct 2020 13:38:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2103
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/jquery.lazy.js?ver=6.0.2
200 OK 9.0 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/jquery.lazy.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8ba75a7cd2f2bdfb3cae1e61831c1324
8878b4955e77974b26c273356b7b7fa0c27d7a28
f3b4daabb80d84a7779cb5c44eeac35452522e3cf38aad6e23557c20fc5f6ce3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/js/jquery.lazy.js?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9016
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1
200 OK 7.3 kB URL HTTP/2 www.digiterati.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15439)
Hash f978912a035ef4780696eed21f9b5218
fd3449da907dfb0328c0396bee6e38607c103d1c
9dcb800ee3731ab7d187c027d586207a454333a37eec291fb4ef6cc5df7cf8b7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 07:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7311
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.1.2
200 OK 1.1 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (3102)
Hash 3462b5f527bec4c29ac17c9b51376238
b0de5e6319455fdd548dd7abee817e0c0716dfcc
64c82985ab675c1c58069c612262aa055737f4343f0f1d91837d5f837441ca0c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.1.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 08:51:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1120
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 8.2 kB URL HTTP/2 www.digiterati.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash a0a1c8194f131320e1798f90a7b1262a
3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 07:26:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8169
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/wp-show-more/wpsm-script.js?ver=1.0.1
200 OK 196 B URL HTTP/2 www.digiterati.com/wp-content/plugins/wp-show-more/wpsm-script.js?ver=1.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d587957bc22c53972f34d463807e6856
4f402a20ac1a592a59114e9ccf639e47460f3612
06e52b20ae75b76d436ce50c247b425aea41ccd91013e8d8402cbd4a9c74a258
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/wp-show-more/wpsm-script.js?ver=1.0.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 196
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/js/core/custom_plugins.js?ver=1.9
200 OK 2.1 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/js/core/custom_plugins.js?ver=1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text
Hash 12aa108bb998f9d28ea3d4e75e797b49
eed399a38584aa4eb4be1523bce6b3fda79350c7
af64a842d6cc24c0fb7853e91e289d246877756d884bf624fa609fdb2a9fd90a
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/js/core/custom_plugins.js?ver=1.9 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2146
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.5.1
200 OK 1.1 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2938), with no line terminators
Hash 769e9d3f7fc383ec1a02024e39730474
4f5a5edf28ed19b48c5e40747ec6896f0df8f09e
4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.5.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/modules/kirki/assets/webfont.js?ver=3.0.21
200 OK 6.0 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/modules/kirki/assets/webfont.js?ver=3.0.21
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2134)
Hash 4561c96caf69e031a6f11e850062d4a2
247dd01df59a263c94273d90a553497d7243597e
7903389eb560180eabfbada317761d24f95fcf509f83e8bf4e75e05431f4de5b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/modules/kirki/assets/webfont.js?ver=3.0.21 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6021
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/tilt.jquery.js?ver=6.0.2
200 OK 3.4 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/tilt.jquery.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (320)
Hash dfb11608e840fbdeddc68aa0538b7d55
c1fbb6b1cf153bbe3e0cdd6c8f4f559eb7df29ae
5fb33ab83836347c11af450a96744fc069cddf4f273c46186fbf17b2037c5582
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/js/tilt.jquery.js?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3354
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/learnpress/assets/js/frontend/become-teacher.min.js?ver=4.1.6.5
200 OK 634 B URL HTTP/2 www.digiterati.com/wp-content/plugins/learnpress/assets/js/frontend/become-teacher.min.js?ver=4.1.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1137), with no line terminators
Hash cff4a75c5fba8a3d07852afed043a26e
1b8d5930780274f3cd1f23fc02d4699d4993180f
07978cb3f3dee426c473259e14158e579ecce1710dda862828ceefedbe60b158
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/learnpress/assets/js/frontend/become-teacher.min.js?ver=4.1.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 634
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.5
200 OK 2.3 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4921)
Hash 120d8146d60a3ca1dcd51cbeb208b724
d6ba43159517bf2320825099a694ddaa91056e0a
779d4fc0edb5fb5c0aa19fa2bacd36250931081219237e36c38a5a3386fbd9f7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2314
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/learnpress/assets/js/dist/utils.min.js?ver=4.1.6.5
200 OK 9.4 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/learnpress/assets/js/dist/utils.min.js?ver=4.1.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (23162), with no line terminators
Hash 3198a06f36466e4317477c8bb4973058
38fcccd4635d3af6a40b08b274834f54b9527fa1
71d8d0384961d1d3dbcb1591465ca935e91a3a76cd5ffae421662e68c502f6af
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/learnpress/assets/js/dist/utils.min.js?ver=4.1.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9376
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.5
200 OK 15 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (37702)
Hash dd3e041d90229b361b887c995f3370da
10642ac5a9b6c0312fa28a195e352551cc1ce876
acf939dbf4c34139d77059f1c94e4ad00d0f74b5c8928b3533776293bfe7def2
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14706
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/2022/05/31-yrs-PNG.png
200 OK 1.0 MB URL HTTP/2 www.digiterati.com/wp-content/uploads/2022/05/31-yrs-PNG.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 3549 x 2701, 8-bit/color RGBA, non-interlaced\012- data
Size 1.0 MB (1043027 bytes)
Hash 5cf833bf06f7532b0f0a444ec052b2e4
600a056799fc51080e6c4e2a9b75492403669437
2589ca2b7652f7398658aab27b91197a80399856fa8aa9c37f12adef7e7a28a7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2022/05/31-yrs-PNG.png HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 May 2022 08:00:00 GMT
accept-ranges: bytes
content-length: 1043027
content-type: image/png
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.6.5
200 OK 17 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43353)
Hash f47c741c9b329818d7e3b9c6fd193278
029b0ee8e2bdfbbac1cb7df53f3f261c51652edd
70010f14156def11c8a6dd16c28e4f6f1aabaecfccfcb72243838ae413aa1cfd
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16889
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
200 OK 4.2 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10544)
Hash 552977febe8ef2c71b0806dfaefd2552
01baebfd09383c5d44f066e7b5540fcca6a5eae4
7895907f5a4f54c08c4705b1a194e21c556d68027c5e0a70d4c05b377e712b1d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4200
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.6.5
200 OK 1.2 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2577)
Hash 159281ac01a46f042b38d0d44cf3eb7a
54677be6b1cf85899d2ab1a6fada531ca5613d29
0738d3f931e8df2b67f3be1ec216b103560266c56cc38fdafae055bcb807ffea
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1151
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.5
200 OK 5.7 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14238)
Hash d088cec7496c5ceea217ee80c40590d4
7652374dde221ccaeba50089cd3792ed0f2dbb9d
c6564851816af2a6a5fcfed3722aaf08944220429ea98ac352304f0abcc0a5e3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5676
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/fonts/Jost-500-Medium.woff
200 OK 40 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/fonts/Jost-500-Medium.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, CFF, length 40380, version 3.200\012- data
Hash 65c5ea8baacec268ecbda9ac9fa7521f
35748eff7e47b392e110f818b8c2ca41e76f70d8
84f7d26e10be8bdaa0c19d2c18f83d258443cec5b467a780869c93b3a4584ef6
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/fonts/Jost-500-Medium.woff HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
content-length: 40380
content-type: font/woff
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/webfonts/fa-solid-900.woff2
200 OK 39 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/webfonts/fa-solid-900.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 38784, version 1.0\012- data
Hash f9b85c9463af7103b9b24bbbf09a06ed
d28d7222bcbeb8ea701a771e85f7efe006e62fb1
62554277d07b20c6bfae7c6267b3198b4846f604a37d4085bf9f54c392210b56
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/wp-content/themes/dotlife/css/font-awesome.min.css?ver=6.0.2
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
content-length: 38784
content-type: font/woff2
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/fonts/Jost-400-Book.woff
200 OK 33 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/fonts/Jost-400-Book.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, CFF, length 32568, version 3.200\012- data
Hash 11e5ce2f79ec7f6489db0f8210972c3f
9e1831e5e9f7d171823d2a99d03d2f37e498d5a8
48f17523f43a7e8a00bfaf8c5a760a683965c40898b2f08fce788323e5f574a7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/fonts/Jost-400-Book.woff HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
content-length: 32568
content-type: font/woff
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/webfonts/fa-brands-400.woff2
200 OK 54 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/webfonts/fa-brands-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 54420, version 1.0\012- data
Hash c971847be1cd6c17abca74025b4f36ae
b2da189d7224a73a5b7d0e4d14a296c5515c1c0a
155963e3fb06f13011705c65bc52ed31f9989b87309c945948a76b35f8e7da67
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/wp-content/themes/dotlife/css/font-awesome.min.css?ver=6.0.2
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
content-length: 54420
content-type: font/woff2
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
chimpstatic.com/mcjs-connected/js/users/2177082a1208693079add6f63/cfe481184280d5bd73f971471.js
200 OK 50 B URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/2177082a1208693079add6f63/cfe481184280d5bd73f971471.js
IP
Hash 104d46a3208b40e8ded389332f5a78a3
4ab55ccb2972e9a3cb62c65c97308c2450a682bb
f6e4f5edb3194334a199f0bf80b38d92a0b7388330fbce94c8c0fb2f852c171f
GET /mcjs-connected/js/users/2177082a1208693079add6f63/cfe481184280d5bd73f971471.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: BkUiBuHBhnYVozpI8ZVHACIml4rYUpeKt/LfgkpjUaxUWJt7Lp259w/OLdk21Uo5Eg6nZs7DjfM=
x-amz-request-id: PR3M7MK9DW5VJE8X
Last-Modified: Wed, 19 Feb 2020 10:01:27 GMT
ETag: "104d46a3208b40e8ded389332f5a78a3"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 50
X-EdgeConnect-MidMile-RTT: 0, 18, 18
X-EdgeConnect-Origin-MEX-Latency: 103, 103, 99
Cache-Control: max-age=1800
Expires: Wed, 12 Oct 2022 05:15:04 GMT
Date: Wed, 12 Oct 2022 04:45:04 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash d1b4fa3a4ce01c542879e6ee68c9f6ae
8408593c599afdf57ae75bb60584d20c5abbabd3
b68c390aa1c336c5562f33540cd99aaa4e027cb29035956e5d0ed7adbfa35ee1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 04:45:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 11 Oct 2022 02:49:10 GMT
Expires: Tue, 18 Oct 2022 02:49:09 GMT
Etag: "8408593c599afdf57ae75bb60584d20c5abbabd3"
Cache-Control: max-age=510844,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 758d2f197fa30b49-OSL
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/dotlife-elementor.js?ver=6.0.2
200 OK 77 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/dotlife-elementor.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash dafa84d4c5d7009928411a5c9c7b0068
ed12c5ea5921ffb5af0841a17c0ae306665bbc3f
af3b8be5063bdd9d9785d47c09f9cc93258bfba48b559dd0065ae8b611ddfbff
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/js/dotlife-elementor.js?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/2020/01/Final-Finishing-school.png
200 OK 54 kB URL HTTP/2 www.digiterati.com/wp-content/uploads/2020/01/Final-Finishing-school.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1390 x 354, 8-bit/color RGBA, non-interlaced\012- data
Hash e917d3309b2079a9b21231aa7a764bb3
f4331d85a617b53dc4128154fd50852f133fe2bd
76e911537c689fdf009b5cad3aa3d611c7b9fa9a09d874663394d42fac2f7b79
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/01/Final-Finishing-school.png HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 06 Apr 2022 10:10:32 GMT
accept-ranges: bytes
content-length: 53642
content-type: image/png
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/2020/01/Final-Finishing-school-300x76.png
200 OK 16 kB URL HTTP/2 www.digiterati.com/wp-content/uploads/2020/01/Final-Finishing-school-300x76.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 300 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash 6b4dad803665769da3ce01d54b10cc1a
97f368e1e26c05130cb6304c08c336bf3a311810
e7bfc1f8157bbb9e5d1d14ac0fec411d2d9cfdf707a6070f88eed8e4aac59bb4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/01/Final-Finishing-school-300x76.png HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 06 Apr 2022 10:10:32 GMT
accept-ranges: bytes
content-length: 16253
content-type: image/png
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
200 OK 48 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65280)
Hash 9bab94170c68fbe973f549afd5800df9
d85739cfe8466ca2d5e424a5e2b962a3e07775cc
07128a93112023df8d6c7fa5ab2cac7f6c0b442c97a5b3dcba3c402f4b651179
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
content-length: 78196
content-type: font/woff2
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
content-length: 76764
content-type: font/woff2
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/learnpress/assets/src/css/vendor/fonts/webfonts/fa-solid-900.woff2
200 OK 76 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/learnpress/assets/src/css/vendor/fonts/webfonts/fa-solid-900.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 75728, version 330.32636\012- data
Hash 44d537ab79f921fde5a28b2c1636f397
b2879f9e1d0985a96842bf7f55a2b2cc4c636d04
3d1080625d3030e88357b3ac9aa377dcec23f1b529c4ad03f7a9a435ccae04be
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/learnpress/assets/src/css/vendor/fonts/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.digiterati.com/wp-content/plugins/learnpress/assets/src/css/vendor/font-awesome-5.min.css?ver=4.1.6.5
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
content-length: 75728
content-type: font/woff2
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
409 Conflict 83 B URL HTTP/2 www.digiterati.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
salesiq.zoho.com/widget?plugin_source=wordpress
200 34 kB URL HTTP/1.1 salesiq.zoho.com/widget?plugin_source=wordpress
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d925a1dbb2c6b8e4edb6a3edbe215556
751f609778962ccb16dc67043f143020b5de244e
a6c6aeb3827e337363b85cf3b8682867e4942e317611bd956b912b136296a9f8
GET /widget?plugin_source=wordpress HTTP/1.1
Host: salesiq.zoho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: ZGS
Date: Wed, 12 Oct 2022 04:45:05 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: 663a60c55d=cbdf55695f341ce901ffef0da353702d; Path=/
Access-Control-Allow-Origin: *
Cache-Control: must-revalidate
Pragma:
Expires: Wed, 12 Oct 2022 04:50:05 GMT
ETag: W/0250414b10a2ffb89a4924e0f1ad6531066baeb8abd61fd28f451396e4f20f14
vary: accept-encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9045885902afb286eef41988716895
550fd256897d4f483d00768972f56cd8c35e09e8
c3a8ae68f7eece41a71cd344042b97c99a12c61c5a40b29117fc3f6a8aa9eabd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6482
Cache-Control: max-age=138811
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:05 GMT
Etag: "6345a83a-1d7"
Expires: Thu, 13 Oct 2022 19:18:36 GMT
Last-Modified: Tue, 11 Oct 2022 17:30:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 12 Oct 2022 04:41:09 GMT
expires: Wed, 12 Oct 2022 06:41:09 GMT
cache-control: public, max-age=7200
age: 236
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ONmc4c07IORp9V9OvmJ22B7ZvQnfBfouKwUBpDDuwPy1D46NwiFAlY8eXTzLouagVsz3+yKlkm5joAyXQbO5bg==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1904183273
date: Wed, 12 Oct 2022 04:45:05 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec8c3be288c030a2f21f77da38609a2c
5dce231ac91002054bbdbc6b19f6d1aa0d6c32bc
fa3abfefbd26a9339066ee03360614fc68312aefd2aa7e47e291589f426a7265
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9045885902afb286eef41988716895
550fd256897d4f483d00768972f56cd8c35e09e8
c3a8ae68f7eece41a71cd344042b97c99a12c61c5a40b29117fc3f6a8aa9eabd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6482
Cache-Control: max-age=138811
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:05 GMT
Etag: "6345a83a-1d7"
Expires: Thu, 13 Oct 2022 19:18:36 GMT
Last-Modified: Tue, 11 Oct 2022 17:30:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 12 Oct 2022 04:45:05 GMT
expires: Wed, 12 Oct 2022 04:45:05 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b8e058c50dbe0871b6ccde4ed4cc8785
06b0c34d584624df99282c1fff1d766b9ed00e64
3319073b74402c41450cc9ca2162140dbe8b231db146cf8e77cb0b43fa461b4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.digiterati.com/wp-content/uploads/2020/01/cropped-31Yrs-Nav-Bar-192x192.png
200 OK 34 kB URL HTTP/2 www.digiterati.com/wp-content/uploads/2020/01/cropped-31Yrs-Nav-Bar-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 12966e58dc223f889885b56fb5045366
89e760538ac17de87ff20221a671acf3961bb950
a3bd84725e859753b51c670bda9638ccff8563a1d18e9789595b937da5799fb9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/01/cropped-31Yrs-Nav-Bar-192x192.png HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b; _gcl_au=1.1.1258605495.1665549905
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Jun 2022 07:30:43 GMT
accept-ranges: bytes
content-length: 34012
content-type: image/png
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/2020/01/cropped-31Yrs-Nav-Bar-32x32.png
200 OK 2.2 kB URL HTTP/2 www.digiterati.com/wp-content/uploads/2020/01/cropped-31Yrs-Nav-Bar-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 72d438acfe398771b9a3ad47156f217d
359b829148072d25e25645d1fd38965b52247734
95b896a6c174f46c9e1693622f660c2054aeb82aedc806b8bd0af137626c385a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/01/cropped-31Yrs-Nav-Bar-32x32.png HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b; _gcl_au=1.1.1258605495.1665549905
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Jun 2022 07:30:43 GMT
accept-ranges: bytes
content-length: 2153
content-type: image/png
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
salesiq.zoho.com/visitor/v2/channels/website?widgetcode=3920cca50a226aae8e975549ee1342cae2a6cdd5cf69a7d2b54878b8313dad54&internal_channel_req=true&language_api=true&browser_language=en¤t_domain=https%3A%2F%2Fdigiterati.com&pagetitle=Page%20not%20found%20-%20Digiterati&include_fields=avuid
200 7.7 kB URL HTTP/1.1 salesiq.zoho.com/visitor/v2/channels/website?widgetcode=3920cca50a226aae8e975549ee1342cae2a6cdd5cf69a7d2b54878b8313dad54&internal_channel_req=true&language_api=true&browser_language=en¤t_domain=https%3A%2F%2Fdigiterati.com&pagetitle=Page%20not%20found%20-%20Digiterati&include_fields=avuid
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18700), with no line terminators
Hash 4036476ebd13b32bd9d90762bfe17ba8
29772f9bff263f2258bf642fed8eecfca50fc851
f2adb94fba689f255324bf7871abbb866b3b5867e96e5b1d33b92f2d2c2fd674
GET /visitor/v2/channels/website?widgetcode=3920cca50a226aae8e975549ee1342cae2a6cdd5cf69a7d2b54878b8313dad54&internal_channel_req=true&language_api=true&browser_language=en¤t_domain=https%3A%2F%2Fdigiterati.com&pagetitle=Page%20not%20found%20-%20Digiterati&include_fields=avuid HTTP/1.1
Host: salesiq.zoho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.digiterati.com
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: ZGS
Date: Wed, 12 Oct 2022 04:45:05 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Content-Type-Options: nosniff
Encoding: UTF-8
X-XSS-Protection: 1
Set-Cookie: 663a60c55d=6d1e74808acfcf5f05891ca0fa319340; Path=/
LS_CSRF_TOKEN=68173e4e-dc2c-4d48-bbbb-f452544f85ad;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=68173e4e-dc2c-4d48-bbbb-f452544f85ad;path=/;SameSite=Strict;Secure;priority=high
uesign=ebb769c03791589b3b56392f9275fd11495cf07aed40f1e49eae1f3aa456d85f97a5622f6340328708f4a223559b78a8;Max-Age=2592000;Path=/;Secure;SameSite=None;priority=high
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Headers: Content-Type,x-siq-internal-channel
Access-Control-Allow-Origin: https://www.digiterati.com
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Content-Language: en-US
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
www.digiterati.com/wp-content/themes/dotlife/icons/modulobox.svg
200 OK 21 kB URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/icons/modulobox.svg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type SVG Scalable Vector Graphics image\012- exported SGML document, ASCII text, with very long lines (983), with CRLF line terminators
Hash 2170e962fb692fb78376538e343b0daa
baf4d1341c571c54e5c8b0960eda4c8f67a9856e
9fdccbaf956ea5b536e150002bbcbcb43ec7100fc79e9946e992bb3b8e8be1b7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/icons/modulobox.svg HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/wp-content/themes/dotlife/css/modulobox.css?ver=6.0.2
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b; _gcl_au=1.1.1258605495.1665549905; _ga=GA1.2.1567986814.1665549905; _gid=GA1.2.1513734632.1665549905
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
content-length: 20778
content-type: image/svg+xml
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c80718a9202adfa94d1a6c199bdd1357
3c196e5ecf098e7674259011f20584fcc40bb816
82b302741334eb68103d99f80f59c62dde8e309a7df071a0766bef263cd57fa9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 10 Oct 2022 15:09:29 GMT
Expires: Mon, 17 Oct 2022 15:09:28 GMT
Etag: "3c196e5ecf098e7674259011f20584fcc40bb816"
Cache-Control: max-age=468862,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 758d2f1f8c570b49-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash c80718a9202adfa94d1a6c199bdd1357
3c196e5ecf098e7674259011f20584fcc40bb816
82b302741334eb68103d99f80f59c62dde8e309a7df071a0766bef263cd57fa9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 10 Oct 2022 15:09:29 GMT
Expires: Mon, 17 Oct 2022 15:09:28 GMT
Etag: "3c196e5ecf098e7674259011f20584fcc40bb816"
Cache-Control: max-age=468862,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 758d2f1f8c85b4fd-OSL
js.zohocdn.com/salesiq/js/floatbutton8_81e627b6c12ab193b466a5c71f2f715e_.js
200 OK 10 kB URL HTTP/2 js.zohocdn.com/salesiq/js/floatbutton8_81e627b6c12ab193b466a5c71f2f715e_.js
IP
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (32088), with no line terminators
Hash 8b751b70b9d8a94432fb46f6a62a49cf
53b740527e3ebdeaf0a52821f5f0abedc81b40bb
5d08323f0732d99276af3f39f74dfaf6c91e2336103ba6c4ad68db85f066efb1
GET /salesiq/js/floatbutton8_81e627b6c12ab193b466a5c71f2f715e_.js HTTP/1.1
Host: js.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Wed, 12 Oct 2022 04:45:05 GMT
content-type: application/javascript;charset=UTF-8
content-length: 10490
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "8b751b70b9d8a94432fb46f6a62a49cf"
content-language: en-US
last-modified: Tue, 04 Oct 2022 07:21:00 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 21c2c2ab15bde0c1fd633b02476ec710
z-origin-id: ex1-e3c6a27de587453987e4bb0ee0c34a0e
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
css.zohocdn.com/salesiq/styles/floatbutton8_45b41e11f3cc7a910f351f8c19d56011_.css
200 OK 4.6 kB URL HTTP/2 css.zohocdn.com/salesiq/styles/floatbutton8_45b41e11f3cc7a910f351f8c19d56011_.css
IP
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (19683), with no line terminators
Hash b21d3f2543a213cac88b28e97448f300
5231b15b96174538f59a30ea7c8ff15c5a3af499
d0e77373d374993a52536a65dd0b14dcf0ec96f1a142f744a3efd943f8627a52
GET /salesiq/styles/floatbutton8_45b41e11f3cc7a910f351f8c19d56011_.css HTTP/1.1
Host: css.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Wed, 12 Oct 2022 04:45:05 GMT
content-type: text/css;charset=UTF-8
content-length: 4574
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "b21d3f2543a213cac88b28e97448f300"
content-language: en-US
last-modified: Tue, 01 Mar 2022 17:15:25 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 29026d566c369bf24ece8805b71f47fa
z-origin-id: ex1-11de2fdb2cbd45948a9b20102a763d30
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.digiterati.com/?wc-ajax=get_refreshed_fragments
200 OK 161 B URL HTTP/2 www.digiterati.com/?wc-ajax=get_refreshed_fragments
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JSON data\012- , ASCII text, with no line terminators
Hash 650d329ca7144ad1b254f70cec48c223
05e4429056d334328c79307d47cb4f2437037c25
2343b049d208442d3efabc649b5f659a589a5bbb8d5e92f1fffb474775331fea
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.digiterati.com
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b; _gcl_au=1.1.1258605495.1665549905; _ga=GA1.2.1567986814.1665549905; _gid=GA1.2.1513734632.1665549905
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.digiterati.com
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
set-cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; expires=Fri, 14-Oct-2022 04:45:02 GMT; Max-Age=172797; path=/; secure
vary: Accept-Encoding
content-encoding: gzip
content-length: 161
content-type: application/json; charset=UTF-8
date: Wed, 12 Oct 2022 04:45:05 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b328dd45b340d747021ad1da23ede95d
92811e18e93271b7b7fc75b2e0ff9d3617f0417e
8e3a7c1a63d37d561dc08f9cec0863582709bb8248214c0f08586bbf3040cad2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/603227663/?random=1665549905416&cv=9&fst=1665549905416&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&tiba=Page%20not%20found%20-%20Digiterati&auid=1258605495.1665549905&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/603227663/?random=1665549905416&cv=9&fst=1665549905416&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&tiba=Page%20not%20found%20-%20Digiterati&auid=1258605495.1665549905&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2306), with no line terminators
Hash 1c3c9ea77c6062a09c323c0297df294d
2ace3240cb61df9ed441de6e90d68d8fd07502e3
eaac904a1e8cd9ed9dd92da884bbbc3e0a1366dcfb4a116059a22d7f587e7fee
GET /pagead/viewthroughconversion/603227663/?random=1665549905416&cv=9&fst=1665549905416&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&tiba=Page%20not%20found%20-%20Digiterati&auid=1258605495.1665549905&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 12 Oct 2022 04:45:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1051
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 12-Oct-2022 05:00:06 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
css.zohocdn.com/salesiq/styles/fonts/float/offline_f17fc97ba88940f54c009c8b636e9264_.ttf
200 OK 1.2 kB URL HTTP/2 css.zohocdn.com/salesiq/styles/fonts/float/offline_f17fc97ba88940f54c009c8b636e9264_.ttf
IP
ASN #41913 Computerline GmbH
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 1cb1147017d54b1d3f5330234ea534d6
6e62ead36c951a2403dd5113d94dc15e864dfa98
98f46778b83355d9dd86578849f60f176107a32db41656b083491874bd400b5d
GET /salesiq/styles/fonts/float/offline_f17fc97ba88940f54c009c8b636e9264_.ttf HTTP/1.1
Host: css.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.digiterati.com
Connection: keep-alive
Referer: https://css.zohocdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Wed, 12 Oct 2022 04:45:06 GMT
content-type: font/ttf
content-length: 1200
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
access-control-expose-headers: *
access-control-allow-origin: *
etag: "1cb1147017d54b1d3f5330234ea534d6"
content-language: en-US
last-modified: Thu, 30 Dec 2021 10:15:16 GMT
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 9c0d27611bfa65fe91f3c2a5937f2be1
z-origin-id: ex1-1bc192d546d74b9c9b7c4cc6a17b12f0
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d0a0ed90364e0eea045f6e6cbc6521d
f76cac3b64a0310a0f5dc859cd2310802c024426
26caffaa8fc4b28a0fbe229d64d4f14c621178610521c58881b5cc5b39102382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:45:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/603227663/?random=1665549905416&cv=9&fst=1665547200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&tiba=Page%20not%20found%20-%20Digiterati&async=1&fmt=3&is_vtc=1&random=3656771929&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/603227663/?random=1665549905416&cv=9&fst=1665547200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&tiba=Page%20not%20found%20-%20Digiterati&async=1&fmt=3&is_vtc=1&random=3656771929&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/603227663/?random=1665549905416&cv=9&fst=1665547200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&tiba=Page%20not%20found%20-%20Digiterati&async=1&fmt=3&is_vtc=1&random=3656771929&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 12 Oct 2022 04:45:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/modulobox.js?ver=6.0.2
200 OK 53 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/js/modulobox.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 7b9559534a010224b8bc2f04b137430f
cd43db06ddcbbf87051880c724a542f3636c5fe6
4525bd388e997a5b5199196cf6e9a05a0d04b7277c40847d7cca55b08258bbae
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/js/modulobox.js?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-64245360-1&cid=1567986814.1665549905&jid=1526721967&gjid=824114437&_gid=1513734632.1665549905&_u=aGBAAUIgAAAAACAAI~&z=492638281
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-64245360-1&cid=1567986814.1665549905&jid=1526721967&gjid=824114437&_gid=1513734632.1665549905&_u=aGBAAUIgAAAAACAAI~&z=492638281
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-64245360-1&cid=1567986814.1665549905&jid=1526721967&gjid=824114437&_gid=1513734632.1665549905&_u=aGBAAUIgAAAAACAAI~&z=492638281 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.digiterati.com
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.digiterati.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 12 Oct 2022 04:45:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=910787532444147&ev=PageView&dl=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&rl=&if=false&ts=1665549906141&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1665549906140.6699412&it=1665549905383&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=910787532444147&ev=PageView&dl=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&rl=&if=false&ts=1665549906141&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1665549906140.6699412&it=1665549905383&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=910787532444147&ev=PageView&dl=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod&rl=&if=false&ts=1665549906141&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1665549906140.6699412&it=1665549905383&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Wed, 12 Oct 2022 04:45:06 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash dcfcd26f74074e0334053a662f313f50
0f7b30fbdf80a9b7b4764d6d9fde6abe0d5c5b62
2b8a1e2a5fb65b039b97c7a5dcafe0dc46bf293b577fabd55fdd7765c83464a5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 04:45:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 10 Oct 2022 10:34:42 GMT
Expires: Mon, 17 Oct 2022 10:34:41 GMT
Etag: "0f7b30fbdf80a9b7b4764d6d9fde6abe0d5c5b62"
Cache-Control: max-age=452374,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 758d2f213d780b49-OSL
www.digiterati.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.4.3
200 OK 44 kB URL HTTP/2 www.digiterati.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.4.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash be4d656496676d138faaa5a9bf320cd9
bff15ecbaff5d2959785da5430cae4a5ed7ce7b9
411adbb734d6fc1e65a42803e30ff0f233c34703c1c24316da4db3b05bc411d3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.4.3 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/uploads/2022/05/31yrs.jpg
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/uploads/2022/05/31yrs.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2022/05/31yrs.jpg HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 May 2022 07:59:08 GMT
accept-ranges: bytes
content-length: 494977
content-type: image/jpeg
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.6.5
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.1.5
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.1.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.1.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:09 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 12 Oct 2022 04:45:03 GMT
date: Wed, 12 Oct 2022 04:45:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/learnpress/assets/css/learnpress.min.css?ver=4.1.6.5
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/plugins/learnpress/assets/css/learnpress.min.css?ver=4.1.6.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/learnpress/assets/css/learnpress.min.css?ver=4.1.6.5 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/dotlife-elementor.css?ver=6.0.2
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/plugins/dotlife-elementor/assets/css/dotlife-elementor.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/dotlife-elementor/assets/css/dotlife-elementor.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-content/themes/dotlife/css/core/screen.css?ver=6.0.2
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-content/themes/dotlife/css/core/screen.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/dotlife/css/core/screen.css?ver=6.0.2 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 23 Jul 2022 15:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
www.digiterati.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 www.digiterati.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.digiterati.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.digiterati.com/etuu/robquleiod
Cookie: _learn_press_session_42f470109b34928519110cad5d3bb49c=3319a9c1a9167be95340ded2958abe84%7C%7C1665722702%7C%7Ca6f706c0cde7fba12c2b8b92a1370f65; mailchimp_landing_site=https%3A%2F%2Fwww.digiterati.com%2Fetuu%2Frobquleiod; _wordpress_lp_guest=9320b11a56cc4a69a98bb1ff473581fc; PHPSESSID=c21eed7461ea52462c5319be65332a5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Apr 2022 10:44:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 12 Oct 2022 04:45:03 GMT
server: Apache
X-Firefox-Spdy: h2
162.241.85.228
96.6.17.210
185.20.209.147
31.13.72.36
93.184.220.29
0.0.0.0