firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 10:24:22 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jSz5PVDUy2_XG5VJ0d7EVgFInWpTmTCjkIXIpqFmi1g27KhtktZ5og==
Age: 3452
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Es-AT1LrZdGvKb6mJO-MccW2Iy5Zfz2peMzTK3liV-DdG5ckByPScQ==
age: 21207
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6dd4587c98aef98ad0939030a6976a7f
92dc5966ac2deb0c3ac7fdd02bf8d28f9239801e
a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4254
Expires: Thu, 29 Sep 2022 12:32:48 GMT
Date: Thu, 29 Sep 2022 11:21:54 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 11:21:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 10:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 29 Sep 2022 10:41:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ifOS6e05lIg_0ZrlZTOFo9vBnseQbn7xqiLvVve_o8f1wjJxsf5moA==
Age: 3142
nextmedia.com.uy/esri/edrseteheptnrrie
301 Moved Permanently 0 B URL HTTP/1.1 nextmedia.com.uy/esri/edrseteheptnrrie
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /esri/edrseteheptnrrie HTTP/1.1
Host: nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Sep 2022 11:21:54 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash f09cb223e3dc028c58cf32c2274c3766
ca7f1663a1200941986e786353ed2f3ff50bd0b2
9b89a5534b1a84f0a86f150dc7f1f699bb972f7b8e151b29c02454dd939066ca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4397
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:55 GMT
Last-Modified: Thu, 29 Sep 2022 10:08:38 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iquYKrGXzY41vHX6ApvLYw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Xvq6eg5/7ssxxVWn/wVKey5noYc=
www.nextmedia.com.uy/esri/edrseteheptnrrie
404 Not Found 22 kB URL HTTP/1.1 www.nextmedia.com.uy/esri/edrseteheptnrrie
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1820), with CRLF, LF line terminators
Hash 48d35ac8405d1bdd942d705c9afa18f9
d0e20df2dbacb9a7d24b35b66e62b129c1e8c49a
cc4677d4e94f652673c3ff7a354398d6bcd27469ccc66e83a1ca143dcd7884fa
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /esri/edrseteheptnrrie HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Thu, 29 Sep 2022 11:21:55 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.nextmedia.com.uy/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.nextmedia.com.uy/site/wp-includes/css/dist/block-library/style.min.css?ver=5.5.10
200 OK 54 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-includes/css/dist/block-library/style.min.css?ver=5.5.10
IP
File type ASCII text, with very long lines (27100)
Hash 2e7e1d1c1d4d446a1b6b63295757d859
27a1d9dcbdc4aff486016b5c9f3ece6ad0c028c1
8c626f0f9b5c109539b256b73e72c02b300a184f46b4535c2eb86599215c78af
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-includes/css/dist/block-library/style.min.css?ver=5.5.10 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 04:23:14 GMT
Accept-Ranges: bytes
Content-Length: 53907
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.2.2
200 OK 1.9 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.2.2
IP
Hash c7fd42b5bb3873666b0c3fc87bf32c6d
721e0a33ef06d747b0131e5aff045ea6968a8020
892af9f95c881cde5c6c1810e0f45e4687174a1171504c96b36218dd54bb1486
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.2.2 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 24 Sep 2020 16:23:43 GMT
Accept-Ranges: bytes
Content-Length: 1920
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/reset.css
200 OK 8.8 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 4742c8599e1b4c61257bad92f618525c
7a87b3f5f0372e7a4bcb0d0cd579e52a26240fec
55b0fcb673405777d1739e14e5f88c418af14a0a781208230c54ae49ea36c8aa
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/css/reset.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:32:26 GMT
Accept-Ranges: bytes
Content-Length: 8753
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/responsive-leyouts.css
200 OK 43 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/responsive-leyouts.css
IP
File type ASCII text, with CRLF line terminators
Hash 08fd54ec73d67b0af064a83ff9f625c8
ddb1be55a6aa21787e4b656aa04a8d4c079476c3
1e33b26dd791fa7e0a17c959d0b8dfe5b93ecd84233d7c96dc3d79ac7887343d
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/css/responsive-leyouts.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:32:27 GMT
Accept-Ranges: bytes
Content-Length: 42602
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/sticky.css
200 OK 2.2 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/sticky.css
IP
File type ASCII text, with very long lines (578), with CRLF line terminators
Hash cb115e57cb52b6bcf629c601cee548e6
753b472f9bf556cbc4611873e4e006afe609a308
b65bd205ea4b1b6dd9bdf430e44310499cb84b1e3cf21c8c103233e2267c676e
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/mainmenu/sticky.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:25 GMT
Accept-Ranges: bytes
Content-Length: 2170
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=4.5.3
200 OK 22 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=4.5.3
IP
File type ASCII text, with very long lines (21822)
Hash feda974a77ea5783b8be673f142b7c88
b71d1c7c315b67c614563382d1c2a868ac14d729
0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=4.5.3 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 24 Sep 2020 16:08:13 GMT
Accept-Ranges: bytes
Content-Length: 21984
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/fhmm.css
200 OK 7.8 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/fhmm.css
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 4fee8a2c63f79dec3e3ca80b8365fca2
673e064870f6f6364180e39a8fea2e5fb3ed908e
a70756c6da522740d0c52de1026daa9a554d38702260f8e940bdd64735b2ab6e
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/mainmenu/fhmm.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:21 GMT
Accept-Ranges: bytes
Content-Length: 7788
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs.css
200 OK 1.5 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs.css
IP
File type ASCII text, with CRLF, CR line terminators
Hash 3be103a67ec588fa89a748f4f22b6261
faa77ba67de5ab33d15f9705f16c9949b791f91b
00edcfbaa6730afd232d9af9ffbcc87e3544cc67bcc83983bc572dd1e9ad3d93
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:19 GMT
Accept-Ranges: bytes
Content-Length: 1536
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/icomoon/css/icomoon.css
200 OK 91 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/icomoon/css/icomoon.css
IP
File type ASCII text, with very long lines (24793), with CRLF line terminators
Hash 6dc4d76b93c283196bdaa251b01a891b
7e1148ec5586a34df55145d4d91f5b307968d4fc
8d563da1c29bdb0662e845dac2306993682369ba4cdce519fc14ef6529f4db2d
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/css/icomoon/css/icomoon.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:32:01 GMT
Accept-Ranges: bytes
Content-Length: 91002
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs2.css
200 OK 1.9 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs2.css
IP
File type ASCII text, with CRLF, CR line terminators
Hash 324f9fa957b7b67d4da8494f918ddfa9
bea130ce88227f70737050b3cb7fa7f2aa42911a
019d90d71a7fe95561dadd2e36895b475017277337b2fa4bcafb1a765373188c
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs2.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:19 GMT
Accept-Ranges: bytes
Content-Length: 1854
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10335
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 11:21:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10335
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 11:21:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 556ea631652cbb77ff38dbe3bbc8c4d1
ba797da9b2d6942161fa02a0e431de4868b84327
130dab67cb6d80c741a7f2dadfd536bd6900204880dc3b68b2afbfa53dd3d781
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8754
x-amzn-requestid: 175fc592-ed89-44fb-8cf7-8a4404f59d4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZC5OcHKkIAMFafA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633108c2-2c0c36007bc8bcb56a54e8a1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 02:04:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -AhTOJwgY3-DnA_pYXdBL18wPP_fNeyDmZjkdkQ2J-xrBZSyRcdK3Q==
via: 1.1 71e7943ea0729c284a06faa05a567236.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 20:59:31 GMT
age: 51746
etag: "ba797da9b2d6942161fa02a0e431de4868b84327"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ac86079d2901fb11bfaff81d91bb2d2
4fc0699c763f67a2602b4b3f46b8b4013d2049c6
8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3332
x-amzn-requestid: 34214e89-7232-4fd5-9257-adf231670681
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDb3vGkOIAMFVhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63314031-3056111d48a5027a2062ad1b;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 06:01:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VosALWNOhCfUDfo2bXgYE0Cx2duyHRaLb5DCn9IydXtoIsYyg9vWhA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:49:13 GMT
age: 48764
etag: "4fc0699c763f67a2602b4b3f46b8b4013d2049c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 456968f691ae9464d69a37bffe9bd7ce
31b8538deb0f00d5b4182739a4a2fcc1b956a998
5cde1e3158e6c6c0b7a01d3bd32f2aa292b3b205f604e5c4ed71cafedad06bf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7810
x-amzn-requestid: 7f6d92e1-c7b1-4dd2-9efa-52ad324ca19d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK6pFvkoAMF_yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334beaa-362b7368566955966db78385;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TbPFEVDpMOjK26iu1UGcx56vtP7Pywq05VAylNubOIfbMgo1qGsA-w==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 04:12:40 GMT
age: 25757
etag: "31b8538deb0f00d5b4182739a4a2fcc1b956a998"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30471179bd7cdeecea2fa4ea98701aef
2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb
967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4235
x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK2nFsDoAMFRwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:40:46 GMT
age: 49271
etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aed4d25286420a1405c3274931194002
c17c7bdfa4b40f9a0634da65c610869e5c410bf1
f32058bdd49930b927d1f9fdfd204ed054b4f85e0d679eff067d522d42ac504a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4093
x-amzn-requestid: 4275d743-8507-4fbe-83d1-cc0da2adef7b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKoPHCMIAMF7wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be34-5ddb717430e7b38e3ee53657;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H713oiiX6wslZytV_P5NblH5vT7KZ2fv1G3DLKLrH5nw0lHOquia4w==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:40:48 GMT
etag: "c17c7bdfa4b40f9a0634da65c610869e5c410bf1"
content-type: image/jpeg
age: 49269
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10335
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 11:21:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11594ce7500d8776bfd5162b17f87d72
72603efba82d649ce5a7a0ca45dc830c0d9ef012
511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gP4V4fq53Z5BFfjDlx1LCR9AhUPTq0qusBaOY_UEXjJjM6SByqDgXg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:41:45 GMT
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
content-type: image/jpeg
age: 49212
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10335
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 11:21:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10335
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 11:21:57 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/style.css
200 OK 171 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/style.css
IP
File type ASCII text, with CRLF, CR line terminators
Size 171 kB (171011 bytes)
Hash 624c6d5ad4191a2fde862ec361ea2c11
858303f29e46c41141988a2491b8194702bb1e9b
96cf83119dd0f07435c445ef9735afd4d63abd80a3793847f8f789691668a62f
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/css/style.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Fri, 21 Oct 2016 19:53:36 GMT
Accept-Ranges: bytes
Content-Length: 171011
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/bootstrap.css
200 OK 103 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/bootstrap.css
IP
File type ASCII text, with very long lines (540), with CRLF line terminators
Size 103 kB (103221 bytes)
Hash fae68b053490fbb76a739788aa455092
b376ae336047098a2f0ae996055d00a98792c192
e8d33ef7b4a4891cabbf3d75f755eed9f769fefe4d94aa360d49f2c63f69d4f9
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/mainmenu/bootstrap.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:16 GMT
Accept-Ranges: bytes
Content-Length: 103221
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs3.css
200 OK 2.4 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs3.css
IP
File type ASCII text, with CRLF, CR line terminators
Hash ffa0c082ed960f8cd5f81e6377aee902
7485535eb1aa3ea90060d29cb5949bf6eb7b7d0d
7bce1b220daeba56b9b0b72f64dfb6a553c567abf2ec963309aa57054dcb779e
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/tabs/assets/css/responsive-tabs3.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:20 GMT
Accept-Ranges: bytes
Content-Length: 2362
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/skin.css
200 OK 8.6 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/skin.css
IP
File type ASCII text, with CRLF, CR line terminators
Hash b9b2a71e9b2c75c04062ca864ac9067f
510a0b30cc8a5a4f1978992e53c24c92047168a3
d1e3085724a8e96f554613d5f7e5057747e3845758df79060e4cd01aa82d82bf
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/carousel/skin.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:39 GMT
Accept-Ranges: bytes
Content-Length: 8616
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/flexslider.css
200 OK 6.7 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/flexslider.css
IP
File type ASCII text, with very long lines (361), with CRLF, CR line terminators
Hash f7bbc2938ac7c365c3c931854409e714
25a4246f9f6bedcae91e8f9367dcd89efccca507
4b88b35a507d00a05eb5fa313d804dddb8799dcffa73175bdb4d2afd1d9c0f78
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/carousel/flexslider.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:33 GMT
Accept-Ranges: bytes
Content-Length: 6715
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/cubeportfolio/cubeportfolio.min.css
200 OK 53 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/cubeportfolio/cubeportfolio.min.css
IP
File type ASCII text, with very long lines (762), with CRLF line terminators
Hash caf134d203ce8520bcc46888a19602e3
1d1c34eab5dd8102c0cd4e7b3527b2e9ca8fe372
dbadf5f616f21201ceb74122e6bfb6dbb3a1be58fe5bb14444fb522ad09adf15
GET /site/wp-content/themes/elos-ORIG/js/cubeportfolio/cubeportfolio.min.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:56 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:44 GMT
Accept-Ranges: bytes
Content-Length: 52590
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/accordion/accordion.css
200 OK 2.0 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/accordion/accordion.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (335), with CRLF line terminators
Hash 794393c6de5888a9ba780023509a4a7d
e482fd24c10dad26d998ed35156dda262de2c2d0
f96d47fa4963f1365c5c578dc0b60ac5b9edc7fd096c75d931e7c049fcb451d6
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/accordion/accordion.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:29 GMT
Accept-Ranges: bytes
Content-Length: 1969
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/lightbox/jquery.fancybox.css
200 OK 5.5 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/lightbox/jquery.fancybox.css
IP
File type ASCII text, with CRLF, CR line terminators
Hash e281e808de3820ff76a48179e9835417
edd6b58aa5960bdc4965f686251d4263606305b0
09495bc7d998085ff26506d21de52e2b04743ce67286d34acbb78e6278f9aedc
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/lightbox/jquery.fancybox.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:09 GMT
Accept-Ranges: bytes
Content-Length: 5468
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/style.css?ver=5.5.10
200 OK 308 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/style.css?ver=5.5.10
IP
File type ASCII text, with CRLF line terminators
Hash 64dc91d86e794404f2ef1e86fc33f7c3
23edfc3c9f47adafbdff0440cb381e6566090a46
3fe90f29c27bdf03e52abfde6c56369b3ac98d028f82524f9e3bda4779f974cd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/style.css?ver=5.5.10 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:44:33 GMT
Accept-Ranges: bytes
Content-Length: 308
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/animation.css
200 OK 81 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/animation.css
IP
File type ASCII text, with very long lines (460), with CRLF line terminators
Hash 8bd718967b4f3407f968e2ed8ffc0c5a
6d0c3489d974c5360aff0af7a49b10fd0c49d8d8
4a46c2149e9e4f7c29bf74ef3f93f7f6932f283eb0894502a424442dad91c02c
GET /site/wp-content/themes/elos-ORIG/css/animation.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:31:45 GMT
Accept-Ranges: bytes
Content-Length: 80674
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/uploads/js_composer/custom.css?ver=4.5.3
200 OK 24 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/uploads/js_composer/custom.css?ver=4.5.3
IP
File type ASCII text, with no line terminators
Hash 37ccb42421ed8d9b5f4ce8eb7156f0d6
6534374e222a2850e01e3ed4f74da1fba2b266e2
e9a5730a1649091ba089d6512de3722d32d52d0f68d17c585544df01c3c06806
Analyzer Verdict Alert fortinet Malware
GET /site/wp-content/uploads/js_composer/custom.css?ver=4.5.3 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 24 Sep 2020 16:08:43 GMT
Accept-Ranges: bytes
Content-Length: 24
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=2.16.0
200 OK 77 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=2.16.0
IP
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash e4e0347627c9757bd7a99bc272688580
76f7e65c48c88e456773ddc0620e1896497a729a
b44d9d3d9976db79392b5c1b2dc0f6cd745b695e4a30795f2d393d501c7f0ffc
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=2.16.0 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 19:33:48 GMT
Accept-Ranges: bytes
Content-Length: 77127
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/form/sky-forms.css
200 OK 37 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/form/sky-forms.css
IP
File type ASCII text, with CRLF line terminators
Hash a8946af7926e7b8a45875168a3726829
729a49185f8b6c16ac175b98a892b424d1a4686c
0959695904364235e1cf3d5806123149a13b483b4d2896c30dc186f3351caf8f
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/form/sky-forms.css HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:02 GMT
Accept-Ranges: bytes
Content-Length: 36649
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-includes/js/wp-emoji-release.min.js?ver=5.5.10
200 OK 14 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-includes/js/wp-emoji-release.min.js?ver=5.5.10
IP
File type ASCII text, with very long lines (11272)
Hash 878184c5d285d4d52d926d36ef19b718
dd260ffe0f8e3f38f58efd23cac8a1e5c788dad9
07e4203b9f313b587b1d53f896e63771ec85f9b0d4c2ac5fa64089457784d847
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-includes/js/wp-emoji-release.min.js?ver=5.5.10 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 04:23:14 GMT
Accept-Ranges: bytes
Content-Length: 14229
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/uploads/masterslider/custom.css?ver=5.2
200 OK 16 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/uploads/masterslider/custom.css?ver=5.2
IP
File type ASCII text, with very long lines (13730)
Hash 7935345e5d5062bf298a9b2167055e95
23570a8aeeb45ded5e2baa8d3c8aa7bc08755dc0
c7aded118d07e96c00926ebc8598b8f32455578274d2b77fb72f408803d27b8c
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/uploads/masterslider/custom.css?ver=5.2 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 16:29:55 GMT
Accept-Ranges: bytes
Content-Length: 15531
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.nextmedia.com.uy/site/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 97 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
File type ASCII text, with very long lines (31997)
Hash 49edccea2e7ba985cadc9ba0531cbed1
f8747f8ee704d9af31d0950015e01d3f9635b070
1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 04:23:14 GMT
Accept-Ranges: bytes
Content-Length: 96873
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/form/jquery.validate.min.js
200 OK 26 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/form/jquery.validate.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (26310), with CRLF line terminators
Hash 9cdb694bc2a26d3e35c557de12091cb3
651cc4a9af54d5061dc29f27723e9b6e4ab64f22
0f2567283a8a55b8a5b156ae036e7938ac1bfd6673a944298063fa578d788603
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/form/jquery.validate.min.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:00 GMT
Accept-Ranges: bytes
Content-Length: 26465
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.2.2
200 OK 14 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.2.2
IP
Hash 309e1a27ab5c8722dea8f46fc8c384d5
784a35686079a37cf469e27fd7efa1b2fac7ac97
a0ea735f765d5bc1230beb63bcb701b69c80d77c48572a61bb159a8915903278
Analyzer Verdict Alert fortinet Malware
GET /site/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.2.2 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 24 Sep 2020 16:23:43 GMT
Accept-Ranges: bytes
Content-Length: 14105
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/style-switcher/styleselector.js
200 OK 678 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/style-switcher/styleselector.js
IP
File type ASCII text, with CRLF, CR line terminators
Hash 0a87f8cebb862dbf08d04de518021c61
5326dd4c31e7840d73841f283e3cc8cb28a026b1
1deb758ff379dd346eafd3e47cdc0b210b0caceb7a4ee23d832c4147c3c33e1a
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/style-switcher/styleselector.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:16 GMT
Accept-Ranges: bytes
Content-Length: 678
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/bootstrap.min.js
200 OK 28 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/bootstrap.min.js
IP
File type ASCII text, with very long lines (27535), with CRLF line terminators
Hash a4d202d2888cc20f8b75d4fd3060a1f6
75dcbe3b5435824b206d3a9420f5f3dbade18e24
e76c76a35589d5617d58c02be0d9bff127ba1fce76c71f6c17e38c9e6ddedda9
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/mainmenu/bootstrap.min.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:20 GMT
Accept-Ranges: bytes
Content-Length: 27756
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/jquery.jcarousel.min.js
200 OK 16 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/jquery.jcarousel.min.js
IP
File type ASCII text, with very long lines (15184), with CRLF, CR line terminators
Hash b331ff01eff188a116a44d89dc07e2f8
9a45ef1a50a2d13899ac33723fce36b2211ad418
722d33746fbe7ededf1be97b4a3fcbc34c80c59d29f4418aedae1fe2a2da26c6
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/carousel/jquery.jcarousel.min.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:36 GMT
Accept-Ranges: bytes
Content-Length: 15682
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/scrolltotop/totop.js
200 OK 313 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/scrolltotop/totop.js
IP
File type ASCII text, with CRLF, CR line terminators
Hash 9ee3aa00c97fbbd3bf254da318c2e199
68e16d1adc585649785055b74314f3c545ca2008
75dd5c44cc1d12f0b233cae1595478450ce175f1411a6d76d3208691919f0193
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/scrolltotop/totop.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:11 GMT
Accept-Ranges: bytes
Content-Length: 313
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/accordion/custom.js
200 OK 960 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/accordion/custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 95d3a823c6f4ad80b39271aba089d483
3e619c7375720375c1740183f0fb9fe8ef581e5c
4e0ae47030f09c4de9aaf47427b48d130cf1dd0df966a7bf7663ed67352ab26c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/accordion/custom.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:30 GMT
Accept-Ranges: bytes
Content-Length: 960
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nextmedia.com.uy
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 18:01:25 GMT
expires: Sun, 24 Sep 2023 18:01:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 408032
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nextmedia.com.uy
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 21:13:12 GMT
expires: Tue, 26 Sep 2023 21:13:12 GMT
cache-control: public, max-age=31536000
age: 223725
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/modernizr.custom.75180.js
200 OK 7.8 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/mainmenu/modernizr.custom.75180.js
IP
File type HTML document, ASCII text, with very long lines (7648), with CRLF line terminators
Hash d04d262a373ea40532c95624a1465926
4f640cd5d762777c81735776844882eeaf351d32
9937794f59d37f457793604d7f1d7d43f08c0718bc500ea3970e695b17eb46bb
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/mainmenu/modernizr.custom.75180.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:23 GMT
Accept-Ranges: bytes
Content-Length: 7764
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/style-switcher/jquery-1.js
200 OK 93 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/style-switcher/jquery-1.js
IP
File type Unicode text, UTF-8 text, with very long lines (65478), with CRLF, CR line terminators
Hash 6081f1fbf1d0955a6134d49dc81f970d
297454d38d9b55e59ee21829d9bd5f8928b8d5a1
9c9c3ca3597585fb0a014a91c26ffde9e787230a899c87e380bdad4700055a66
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/style-switcher/jquery-1.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:15 GMT
Accept-Ranges: bytes
Content-Length: 93437
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/cubeportfolio/jquery.cubeportfolio.min.js
200 OK 41 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/cubeportfolio/jquery.cubeportfolio.min.js
IP
File type ASCII text, with very long lines (40999), with CRLF line terminators
Hash 4a03013d94472b55f27ac1acfc4d119e
62a3b21310127354f7cf9cdf0970c183a77bba17
618547129ca7904cc8618e62ae09feb01a805d0250de5e264ac8515a0e71ac31
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/cubeportfolio/jquery.cubeportfolio.min.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:45 GMT
Accept-Ranges: bytes
Content-Length: 41268
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png
301 Moved Permanently 291 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6844158eef86308f7f41925a2d4a71bc
9f752a65de0a0eca1e4e6749b79c5d3b314461f7
353de2dad9bf8284c518ebc9874e054873fba0c50b798bcc8a611f6dbf8cfd82
GET /site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Location: https://www.nextmedia.com.uy/site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png
Content-Length: 291
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/flexslider/jquery.flexslider-min.js?ver=4.5.3
200 OK 22 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/flexslider/jquery.flexslider-min.js?ver=4.5.3
IP
File type ASCII text, with very long lines (21539)
Hash 9ec3c315b67f434aabc4da58eabc6c3a
51b3a7d882f438d53dc69ca5289e92254160c09a
0c853c2cc205bafe5d893017b6a03a2acf0f04a11b85f80605514cf0ae540fe6
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/plugins/js_composer/assets/lib/bower/flexslider/jquery.flexslider-min.js?ver=4.5.3 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 24 Sep 2020 16:08:13 GMT
Accept-Ranges: bytes
Content-Length: 21638
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/custom.js
200 OK 354 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/carousel/custom.js
IP
File type ASCII text, with CRLF, CR line terminators
Hash 465f014c37d909af0195ee4dd0fa3406
a0d1a2c24b16d43d2dde3f467d026ef03b6ec13e
4a1ac05e131d156aa6e92749a32b40a9e55f6163d2330a718a55111df668bbbd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/carousel/custom.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:31 GMT
Accept-Ranges: bytes
Content-Length: 354
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/js/responsive-tabs.min.js
200 OK 2.2 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/tabs/assets/js/responsive-tabs.min.js
IP
File type ASCII text, with very long lines (675), with CRLF, CR line terminators
Hash d0c1c585a240cf7576b7843c8afed393
ebb45a61462071905319637823514164c2a6cb13
b9fc421f2cd73388065d2b4c5fef79b5a45def7e9814faaf079404a6e79354e8
Analyzer Verdict Alert fortinet Malware
GET /site/wp-content/themes/elos-ORIG/js/tabs/assets/js/responsive-tabs.min.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:42:22 GMT
Accept-Ranges: bytes
Content-Length: 2224
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/lightbox/custom.js
200 OK 213 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/lightbox/custom.js
IP
File type ASCII text, with CRLF, CR line terminators
Hash 61758005b6b440e788bb5137a4c5bf74
ceea0c09a475bf4aff34cf7fcf55241c9f070104
b92ec3fa1e85fc1e66713ff6fba20a80423d3352736bdac6cb9a9256116ce46b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/lightbox/custom.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:04 GMT
Accept-Ranges: bytes
Content-Length: 213
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/lightbox/jquery.fancybox.js
200 OK 53 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/lightbox/jquery.fancybox.js
IP
File type ASCII text, with CRLF, CR line terminators
Hash 5f05bf75fff7007e2211f4235903bb25
061bf98b37a295c69d7b884316f7236ee2aef34c
98d6859cac869ae5145a635a68502d8859bab8673ae8e82827a34345cbeb6180
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/lightbox/jquery.fancybox.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:11 GMT
Accept-Ranges: bytes
Content-Length: 52744
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/dist/wow.min.js
200 OK 7.1 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/dist/wow.min.js
IP
File type ASCII text, with very long lines (7052)
Hash 5fa2e4b6acb5db11843b66b812040de3
13895175fe8fc3bb341af017a197ce8599e59451
36a88df037dc6c940450a9e251a34c9321d76d894d3d1734ee8cede45028d84c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/dist/wow.min.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:40:51 GMT
Accept-Ranges: bytes
Content-Length: 7082
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/main.js
200 OK 9.4 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/js/main.js
IP
File type ASCII text, with CRLF line terminators
Hash 7e02507373dc0c52da8a508c46d3ff17
146fefccea29e62fd5874e2308d4f85a1d984d57
525e79d12c58db4c0141e541a6bb7d45cb7a98d54cfea1730393aa8774ffed79
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/js/main.js HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:41:14 GMT
Accept-Ranges: bytes
Content-Length: 9430
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-includes/js/wp-embed.min.js?ver=5.5.10
200 OK 1.4 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-includes/js/wp-embed.min.js?ver=5.5.10
IP
File type ASCII text, with very long lines (1391)
Hash 905225d5711b559d3092387d5ffbedbd
6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d
5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-includes/js/wp-embed.min.js?ver=5.5.10 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/esri/edrseteheptnrrie
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 04:23:15 GMT
Accept-Ranges: bytes
Content-Length: 1426
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/images/elements/pattern11.png
200 OK 20 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/images/elements/pattern11.png
IP
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash e547a578794634635212f480b58e091d
b6980d2fed40a281b71d60f8817cc8deb0553168
de8a7fba9723a4995e2a07bde595860b671ba4a0faf361a23509ab97cb4797af
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/themes/elos-ORIG/images/elements/pattern11.png HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/site/wp-content/themes/elos-ORIG/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 17:38:34 GMT
Accept-Ranges: bytes
Content-Length: 19846
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0
IP
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
Analyzer Verdict Alert fortinet Malware
GET /site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/site/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=4.5.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 24 Sep 2020 16:08:13 GMT
Accept-Ranges: bytes
Content-Length: 65452
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: font/woff
www.nextmedia.com.uy/site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png
200 OK 11 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png
IP
File type PNG image data, 120 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 317b45a8a4909d181c812dc92e307a45
a425b455d2857c0dfcbeff3c421613e1782e2ffe
1ccfa41cad5f4beb8a3af6564ffbad2a7612717425f96bfd192d1a8265b50fde
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/uploads/2015/07/logo-NEXTMEDIA-120.png HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 16:27:25 GMT
Accept-Ranges: bytes
Content-Length: 11389
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75eebff373cf84ae810a9e326f9e3d03
a5b22b0eee98dda385cb4e90d119205bc5f3a25f
f2089c63c7c2b3024972aba8cbc12dfcffc79dfc1ef9f7be801c79e7737b0d71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Thu, 29 Sep 2022 10:41:09 GMT
expires: Thu, 29 Sep 2022 12:41:09 GMT
cache-control: public, max-age=7200
age: 2448
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75eebff373cf84ae810a9e326f9e3d03
a5b22b0eee98dda385cb4e90d119205bc5f3a25f
f2089c63c7c2b3024972aba8cbc12dfcffc79dfc1ef9f7be801c79e7737b0d71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nextmedia.com.uy/site/wp-content/uploads/2015/07/favicon.ico
301 Moved Permanently 280 B URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/uploads/2015/07/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8602598134915272b6a5e617dabc9fa0
60a57a4d5f95e73c3835886b60261991e5aa05dd
770c0ff8e4a10414bfc20483003ef0cd3f2ec9264b60bf1d7c41cddc0385d661
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/uploads/2015/07/favicon.ico HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Sep 2022 11:21:57 GMT
Server: Apache
Location: https://www.nextmedia.com.uy/site/wp-content/uploads/2015/07/favicon.ico
Content-Length: 280
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.google-analytics.com/j/collect?v=1&_v=j97&a=228135919&t=pageview&_s=1&dl=https%3A%2F%2Fwww.nextmedia.com.uy%2Fesri%2Fedrseteheptnrrie&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada%20%7C%20NextMedia&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=649259987&gjid=785055493&cid=215708541.1664450515&tid=UA-87843805-1&_gid=189914167.1664450515&_r=1&_slc=1&z=6015475
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=228135919&t=pageview&_s=1&dl=https%3A%2F%2Fwww.nextmedia.com.uy%2Fesri%2Fedrseteheptnrrie&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada%20%7C%20NextMedia&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=649259987&gjid=785055493&cid=215708541.1664450515&tid=UA-87843805-1&_gid=189914167.1664450515&_r=1&_slc=1&z=6015475
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j97&a=228135919&t=pageview&_s=1&dl=https%3A%2F%2Fwww.nextmedia.com.uy%2Fesri%2Fedrseteheptnrrie&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada%20%7C%20NextMedia&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=649259987&gjid=785055493&cid=215708541.1664450515&tid=UA-87843805-1&_gid=189914167.1664450515&_r=1&_slc=1&z=6015475 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nextmedia.com.uy
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.nextmedia.com.uy
date: Thu, 29 Sep 2022 11:21:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nextmedia.com.uy/site/wp-content/uploads/2015/07/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.nextmedia.com.uy/site/wp-content/uploads/2015/07/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 321a038d5dac717a89c5f8e95a7646cd
0133052f55faf4f5efe18e0148e961641f4f6131
0f2b5dd76aca969af99524acc502ccc4bd258222fafc481ba546976600c633b1
Analyzer Verdict Alert quad9 Sinkholed
GET /site/wp-content/uploads/2015/07/favicon.ico HTTP/1.1
Host: www.nextmedia.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.3.215708541.1664450515; _gid=GA1.3.189914167.1664450515; _gat=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 11:21:58 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2016 16:26:47 GMT
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/x-icon
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 253e735983d6b98808235295de508f8b
e47aa9e4c679c5215cd2d20cd3dcd7ce58fde86d
c4e13af46f6ab54af9a8d5a68fe5c12d8a5c41ed829568380bdeca8c729f1da5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&gjid=785055493&_gid=189914167.1664450515&_u=IEBAAEAAAAAAAC~&z=1879399062
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&gjid=785055493&_gid=189914167.1664450515&_u=IEBAAEAAAAAAAC~&z=1879399062
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&gjid=785055493&_gid=189914167.1664450515&_u=IEBAAEAAAAAAAC~&z=1879399062 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nextmedia.com.uy
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.nextmedia.com.uy
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 29 Sep 2022 11:21:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 253e735983d6b98808235295de508f8b
e47aa9e4c679c5215cd2d20cd3dcd7ce58fde86d
c4e13af46f6ab54af9a8d5a68fe5c12d8a5c41ed829568380bdeca8c729f1da5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
starcom.com.uy/nextmedia/wp-content/uploads/2015/07/footer2.jpg
301 Moved Permanently 279 B URL HTTP/1.1 starcom.com.uy/nextmedia/wp-content/uploads/2015/07/footer2.jpg
IP
ASN #6057 Administracion Nacional de Telecomunicaciones
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 88ae91c4311d938bee406eb680d115fa
39c359b4274217e71710bbb5cf1b492b1a835488
8cdcf402b9edc006342fa294a17a28f2ccd76881796650fbd59cbd66a20c471a
GET /nextmedia/wp-content/uploads/2015/07/footer2.jpg HTTP/1.1
Host: starcom.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Sep 2022 11:21:58 GMT
Server: Apache
Location: https://starcom.com.uy/nextmedia/wp-content/uploads/2015/07/footer2.jpg
Content-Length: 279
Connection: close
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64efebb51e5b4f12f97825c5944d0cfa
fc6830187fd786f3d7fefeda96bf0fbe15509927
a33a76aa921357b856b0f68c84f500cd12c40cce3172723b8cd77c250422ac43
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0acb404c6e5e614b2b45960b66540566
9dd62de9f34b30f89ff0fbe054affd8114562b65
78195875441b18f2c34830e59c85bfba8aa9e4afb3953ea232352b49d67d76bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&_u=IEBAAEAAAAAAAC~&z=1048485890
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&_u=IEBAAEAAAAAAAC~&z=1048485890
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&_u=IEBAAEAAAAAAAC~&z=1048485890 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 11:21:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&_u=IEBAAEAAAAAAAC~&z=1048485890
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&_u=IEBAAEAAAAAAAC~&z=1048485890
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-87843805-1&cid=215708541.1664450515&jid=649259987&_u=IEBAAEAAAAAAAC~&z=1048485890 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 11:21:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64efebb51e5b4f12f97825c5944d0cfa
fc6830187fd786f3d7fefeda96bf0fbe15509927
a33a76aa921357b856b0f68c84f500cd12c40cce3172723b8cd77c250422ac43
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 11:21:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
starcom.com.uy/nextmedia/wp-content/uploads/2015/07/footer2.jpg
404 Not Found 315 B URL HTTP/1.1 starcom.com.uy/nextmedia/wp-content/uploads/2015/07/footer2.jpg
IP
ASN #6057 Administracion Nacional de Telecomunicaciones
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /nextmedia/wp-content/uploads/2015/07/footer2.jpg HTTP/1.1
Host: starcom.com.uy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Thu, 29 Sep 2022 11:21:58 GMT
Server: Apache
Content-Length: 315
Connection: close
Content-Type: text/html; charset=iso-8859-1
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4505f57697072468da82e0b536d0d5b
e1067a2dfbc22e7eb196046d57bd1e17604dba75
b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10023
x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK4dHJLIAMFWmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:40:43 GMT
age: 49280
etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway:400,800,300,200,700,500
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Raleway:400,800,300,200,700,500
IP
GET /css?family=Raleway:400,800,300,200,700,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 11:21:56 GMT
date: Thu, 29 Sep 2022 11:21:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,800,300,200,700,500
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,800,300,200,700,500
IP
GET /css?family=Open+Sans:400,800,300,200,700,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nextmedia.com.uy/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 11:21:57 GMT
date: Thu, 29 Sep 2022 11:21:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
158.106.131.228
23.36.76.226
93.184.220.29
190.64.214.123
0.0.0.0