| pagan.sh/wp-content/uploads/essential-addons-elementor/eael-74.js?ver=1740806819 |  185.193.127.228 | 200 OK | 36 kB |
URL GET pagan.sh/wp-content/uploads/essential-addons-elementor/eael-74.js?ver=1740806819 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (21268) Hashb6b99176dbfe358f5b07578d89f0f7c7 5ab0b72d3299e94a63f0ae2c0e0ebb31d3c3a0ff 10ecfb808879c508ea03a19a348b79bcf2e8f4b28e2ec4449570eb2404d249fa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/essential-addons-elementor/eael-74.js?ver=1740806819 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 21:46:49 GMT
ETag: "8db3-62f3abe68f131-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12504
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.3.0 | 185.193.127.228 | 200 OK | 7.2 kB |
URL GET pagan.sh/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.3.0 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeUnicode text, UTF-8 text, with very long lines (7216), with no line terminators Hashb6ad44e97b1a2bde28f736b065f83c32 c61102585e6911477e7aa4c9defb7428026736c3 c2e0f86f3e3575f9c4a1e91b84af26a7c4712ce17121dfa4fcdf28067707f6be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.3.0 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:38:24 GMT
ETag: "1c2c-62f366f7197b3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1468
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/uploads/elementor/css/post-74.css?ver=1740806932 | 185.193.127.228 | 200 OK | 14 kB |
URL GET pagan.sh/wp-content/uploads/elementor/css/post-74.css?ver=1740806932 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (5150) Hash28dc3e56e00fe699ece7ae9b91ac1246 2a75a9c8050a2c28731b0bf1524be837c75086fc c728efa1f6885d7c2570c55b37b3c1eb10111650ff5f9d7f7c3016a417dc3493
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-74.css?ver=1740806932 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 01 Mar 2025 05:28:52 GMT
ETag: "3776-62f4132dabaf2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2824
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 | 185.193.127.228 | 200 OK | 4.8 kB |
URL GET pagan.sh/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (4857), with no line terminators Hashcfbe9331246b6a20bc00d02c1db2ed47 d8b879cbb8cb0084001505a04a9487ff985c683e f810169ba5c970d191ecfd6385f2a1f8a95aea42d1bbb1ad039c5e4f70e56bea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 30 Sep 2024 05:11:32 GMT
ETag: "12a8-6234f3cefc900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1648
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| | 185.193.127.228 | 200 OK | 35 kB |
IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeHTML document, ASCII text, with very long lines (10901) Hash098d01d066f96cb2c7a2e96eb4bba697 06e50fd4667d62b6d658f5626e204f17d6988d8e 4d89e2fcb7c7340835a4922ccf3d7f8c971632ac5a0c217a0decbc3c5199a77a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self' ;
Link: <https://pagan.sh/index.php/wp-json/>; rel="https://api.w.org/", <https://pagan.sh/index.php/wp-json/wp/v2/pages/74>; rel="alternate"; title="JSON"; type="application/json", <https://pagan.sh/>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8287
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| pagan.sh/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.3.0 | 185.193.127.228 | 200 OK | 1.9 kB |
URL GET pagan.sh/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.3.0 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (1976), with no line terminators Hash0933ec2de7eeca2145eb88d4258bbc95 70668e8de10881f0a31fd73ac93e5f568cc55dc0 1ebddaba2a6a4e2aceb42587edb6a8d4c4f4cd0228c83e022ebbaf5064c17994
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.3.0 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:38:24 GMT
ETag: "790-62f366f718813-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 598
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.27.6 | 185.193.127.228 | 200 OK | 600 B |
URL GET pagan.sh/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.27.6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (601), with no line terminators Hashbe2a3cd1d523e219c302c09edd2c7da5 e94c4c5fa8323a0f095bdbf82e4ad49d9edfe231 9dd13ddc853b6429e7379916b0ce9c6cd7444d08cbcce5ead9d37b8533ed81b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.27.6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:37:03 GMT
ETag: "258-62f366aa1b1ed-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 188
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CVT323%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.7.2 |  142.250.74.10 | 200 OK | 124 kB |
URL GET fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CVT323%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.7.2 IP142.250.74.10:443
CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintF1:11:17:AF:9C:89:34:EE:D5:CB:84:40:84:EA:01:19:A9:F6:ED:C2 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeASCII text, with very long lines (1572) Size124 kB (124341 bytes) Hash30a88337c366ec912b241a6f87afb060 ac71b802ef6ebb4232a9f814bdda709bc87035c5 8ae834ada949b1bcc01be35f10659024913c1303d0f056cc55f4e2e1e8004a0a
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CVT323%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.7.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Mar 2025 15:57:03 GMT
date: Sun, 02 Mar 2025 15:57:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagan.sh/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 185.193.127.228 | 200 OK | 88 kB |
URL GET pagan.sh/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 28 Aug 2023 17:14:24 GMT
ETag: "15601-603fed36d5c00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30368
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.4 | 185.193.127.228 | 200 OK | 12 kB |
URL GET pagan.sh/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.4 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (11556), with no line terminators Hash9f5b81430a3af26d3a2328accb570286 7ed3de690b99dd909f176e5fda9a7e977c1e317f c1cd8c2642c15bfe3ad2489d5ab4fd2a1d697bbaa8d41d2b75e9c4978cf207ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.4 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 20:59:36 GMT
ETag: "2d24-62f3a15958039-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4088
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6 | 185.193.127.228 | 200 OK | 5.4 kB |
URL GET pagan.sh/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (5457), with no line terminators Hash5b85eb9adcff1ad788bbb07d3c7741e5 3a9214921666abdee8ef18ba14e162bdd3a7ca17 1d78ecd09e0c9cc884adf302b40f79982cfdc34322daa31ed4bbd95519f3caee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:37:04 GMT
ETag: "14e6-62f366aa58a52-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2393
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| fonts.gstatic.com/s/vt323/v17/pxiKyp0ihIEF2isfFJU.woff2 | 142.250.74.163 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/vt323/v17/pxiKyp0ihIEF2isfFJU.woff2 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17668, version 1.0 Hash83f07273ba29e7554a8af1efb23d14a9 8307380e3ccd8a7843f3c7a4bf11a22134544f2a dc6a870a116251f87186b5a787702fc7bf6939f2126f66ca82e0a7142a6ba9f6
GET /s/vt323/v17/pxiKyp0ihIEF2isfFJU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pagan.sh
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Feb 2025 09:55:16 GMT
expires: Sat, 28 Feb 2026 09:55:16 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 15:50:13 GMT
content-type: font/woff2
age: 194507
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagan.sh/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6 | 185.193.127.228 | 200 OK | 53 kB |
URL GET pagan.sh/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (53229) Hash4f506205bcc683507cebd23be376b7bb 02c84bab95351436b6e9b703230fa55939c80b39 e57d779ca78ccaeba427caad02796710cc04d789f6da7c65a573b3f0bd179d08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:37:03 GMT
ETag: "d015-62f366aa1736d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7101
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.27.6 | 185.193.127.228 | 200 OK | 254 B |
URL GET pagan.sh/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.27.6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with no line terminators Hasheea427b3ea34a8e13a1484cec3ed76f9 33395ba69e6f472f12fac7774e7b478df8b4b8f2 96bd6ffec87deefaef23091b9b5f73ae9975001d9923dccd7acefe677c17ce3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.27.6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:37:03 GMT
ETag: "fe-62f366aa1c18d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 164
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/themes/hello-elementor/style.min.css?ver=3.3.0 | 185.193.127.228 | 200 OK | 5.5 kB |
URL GET pagan.sh/wp-content/themes/hello-elementor/style.min.css?ver=3.3.0 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (5515), with no line terminators Hash8d6108afd49a867a9eb0b19f1a78076e 50edc62a5c941b5f17a5cf1818a791b67945cd88 185caf6fa58a7126f6f28e5e12e3e1600af92e4af106a489df9a7f46840960ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/style.min.css?ver=3.3.0 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:38:24 GMT
ETag: "157d-62f366f71b6f3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1808
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6 | 185.193.127.228 | 200 OK | 60 kB |
URL GET pagan.sh/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:37:04 GMT
ETag: "e965-62f366aa49ff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17551
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/uploads/2025/03/ygg-border-262x300.png | 185.193.127.228 | 200 OK | 45 kB |
URL GET pagan.sh/wp-content/uploads/2025/03/ygg-border-262x300.png IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typePNG image data, 262 x 300, 8-bit/color RGBA, non-interlaced Hash69c2788af3c678715e2004dbded80ef3 77bbccd585a8e1640eb8dfdae5920e092cf1fa0a d185fa67fb5603366fcbb2f9780ce74ef17a3c0d95b631bb3b395afa9c4c0cd0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/03/ygg-border-262x300.png HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:03 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 01 Mar 2025 04:25:16 GMT
ETag: "b14c-62f404f5d995c"
Accept-Ranges: bytes
Content-Length: 45388
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| pagan.sh/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 | 185.193.127.228 | 200 OK | 9.1 kB |
URL GET pagan.sh/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (9425), with no line terminators Hash1fb2af886396b544159f85c0c83bd895 e95db4a68dcaf71d20f92f4626ad7818496b3c35 0b05f9ebb0e1023e006019337a5642980ac33491097276b0851b9e8e42ae5daf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Thu, 15 Feb 2024 16:53:16 GMT
ETag: "23b5-6116e76b65700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3667
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 | 185.193.127.228 | 200 OK | 22 kB |
URL GET pagan.sh/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Thu, 27 Jun 2024 12:55:22 GMT
ETag: "53d8-61bdea4cf4280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7106
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6 | 185.193.127.228 | 200 OK | 44 kB |
URL GET pagan.sh/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (44212) Hash2f4178ab3a59c6620d2446c1726976eb b861b102f989bed593aaf661d37f90ac03548218 75dd67187032c51f70fec4ff879b978202b184bfe6e5b8fff120ca6db4b2ee33
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:37:04 GMT
ETag: "acdc-62f366aa49ff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13466
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/uploads/essential-addons-elementor/eael-74.css?ver=1740806819 | 185.193.127.228 | 200 OK | 13 kB |
URL GET pagan.sh/wp-content/uploads/essential-addons-elementor/eael-74.css?ver=1740806819 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (7417) Hash56524a735e37a9d606c8bdc47a050987 2a1f794f7a3d69084cc8b5617559bbb4bc124b75 dce10f1531e2aa0f008243bbc8f9177337c2dfe2f8a0c37d67b16ad520a6cfe8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/essential-addons-elementor/eael-74.css?ver=1740806819 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 21:46:49 GMT
ETag: "32ec-62f3abe68e191-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2242
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 185.193.127.228 | 200 OK | 14 kB |
URL GET pagan.sh/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 09 Jun 2023 05:49:24 GMT
ETag: "3509-5fdabee5f2100-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4872
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-includes/js/wp-emoji-release.min.js?ver=94179394bef662cac67e803e3b9a17db | 185.193.127.228 | 200 OK | 19 kB |
URL GET pagan.sh/wp-includes/js/wp-emoji-release.min.js?ver=94179394bef662cac67e803e3b9a17db IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=94179394bef662cac67e803e3b9a17db HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:03 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Thu, 27 Jun 2024 12:55:22 GMT
ETag: "4926-61bdea4cf4280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5062
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/uploads/2025/02/favicon-100x100.jpg | 185.193.127.228 | 200 OK | 3.6 kB |
URL GET pagan.sh/wp-content/uploads/2025/02/favicon-100x100.jpg IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x100, components 3 Hashb7cd148428135a5d24844c30561d927c 41f379341cb4f950bb20b96e70f2cd0d47e1622e afb7e2f057ab1c6abf05672fe644ba2b212aaaa0861738013d6b8ac54f6f70c5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/02/favicon-100x100.jpg HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:03 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 01 Mar 2025 03:52:06 GMT
ETag: "e1f-62f3fd8c24234"
Accept-Ranges: bytes
Content-Length: 3615
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| pagan.sh/wp-content/uploads/2025/02/favicon-300x300.jpg | 185.193.127.228 | 200 OK | 18 kB |
URL GET pagan.sh/wp-content/uploads/2025/02/favicon-300x300.jpg IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 300x300, components 3 Hashcaef4ca468509509829565edd8c95327 2bd2f79d05d580bb7c10446b9fa360023cdb6531 de101f3e7a0be2c6ec97fb78e3f3045f98b467d030c88d57fd4b3d488010cd39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/02/favicon-300x300.jpg HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:03 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 01 Mar 2025 03:52:06 GMT
ETag: "47ee-62f3fd8c19653"
Accept-Ranges: bytes
Content-Length: 18414
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| pagan.sh/wp-content/uploads/2025/02/1024x1024tile.jpg | 185.193.127.228 | 200 OK | 97 kB |
URL GET pagan.sh/wp-content/uploads/2025/02/1024x1024tile.jpg IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Created with GIMP", progressive, precision 8, 1024x1024, components 3 Hash42cfddbd091446825cd500b8a59a1786 02ffd29dcbe0b28098450e03f6bb9461d83e48e6 6839f8fd4974aee1b048c0ce78e631c042d94e4059b7b41d259f85411b07aa30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/02/1024x1024tile.jpg HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagan.sh/wp-content/uploads/elementor/css/post-7.css?ver=1740801755
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:03 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 01 Mar 2025 03:29:24 GMT
ETag: "17b82-62f3f879b7d32"
Accept-Ranges: bytes
Content-Length: 97154
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 | 142.250.74.163 | 200 OK | 40 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40128, version 1.0 Hash9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pagan.sh
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Feb 2025 20:48:59 GMT
expires: Sat, 28 Feb 2026 20:48:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
age: 155284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagan.sh/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.27.4 | 185.193.127.228 | 200 OK | 45 kB |
URL GET pagan.sh/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.27.4 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (44664) Hashfcd952381acd8cc54bc8af56b15cb4be 34e0785ac903193f9899e0ec52e6f9933c61cf52 41c31d2086bcf01ebfce2d206cab615bbfbeada4e36c4736c5cf2c68eaa6811c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.27.4 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 19:19:23 GMT
ETag: "aea4-62f38af2943e6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10701
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/themes/hello-elementor/theme.min.css?ver=3.3.0 | 185.193.127.228 | 200 OK | 5.1 kB |
URL GET pagan.sh/wp-content/themes/hello-elementor/theme.min.css?ver=3.3.0 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeUnicode text, UTF-8 text, with very long lines (5071), with no line terminators Hash9f427da5588f7c58025608088abcbb7b 72d87bc16059e5cc1c428d415235fd8e0c4c7d3a 6b973670889caffaea94c3ea18602cf38a8ebcce331307a88b62f39bbf9a1780
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.3.0 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 16:38:24 GMT
ETag: "13cd-62f366f71b6f3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1289
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/uploads/elementor/css/post-7.css?ver=1740801755 | 185.193.127.228 | 200 OK | 5.8 kB |
URL GET pagan.sh/wp-content/uploads/elementor/css/post-7.css?ver=1740801755 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (6015), with no line terminators Hash50f4c3053e08d4d79601b8b7c8c2a6e6 00c9d46aead9dc5924cbfe012c32f11dae42da8f 2839789e5c634660bfabbf31673258e050bb11db60bb7e7d1e72152064f12b58
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-7.css?ver=1740801755 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 01 Mar 2025 04:02:35 GMT
ETag: "16d2-62f3ffe41156a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1471
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.27.4 | 185.193.127.228 | 200 OK | 24 kB |
URL GET pagan.sh/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.27.4 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (24166) Hash73c7a8e04eaa63a53cafea64cfa9e2be f9f3345bb7c67b6d9c13a9d56eb0dfbb05f62e7e 58f47c6fcbaf4790878c14c934526cfd9552a7bef46201890d1a5c621bf4ab12
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.27.4 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 19:19:23 GMT
ETag: "5e92-62f38af286925-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6510
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| pagan.sh/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.4 | 185.193.127.228 | 200 OK | 7.4 kB |
URL GET pagan.sh/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.4 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeASCII text, with very long lines (7429), with no line terminators Hashe82757df2625f25d28eeec18c4fa165a c2f15a137a896d265fe1e5b52959b4264d7168ff 6c97139b2d662ec783d683b3f4d4b1971f927f79421ee09a02aa76e8be92b90f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.4 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 20:59:36 GMT
ETag: "1cfa-62f3a159466f7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1539
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| pagan.sh/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.27.4 | 185.193.127.228 | 200 OK | 6.3 kB |
URL GET pagan.sh/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.27.4 IP185.193.127.228:443
CertificateIssuerLet's Encrypt Subjectpagan.sh FingerprintF5:31:E6:65:1A:E7:14:B4:DD:1E:7F:D5:30:4E:E1:90:6A:6E:34:AC ValidityFri, 28 Feb 2025 17:30:20 GMT - Thu, 29 May 2025 17:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (6416), with no line terminators Hash6df24cee7b854102805bf9a6d685d1a6 14b3a46cb1d2a6f5c36a0cd773ec6634e54e7fb6 58abf1c51100244553ca55a9d405c9a6ebe7781c589549e8a9b0a3718f57baae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.27.4 HTTP/1.1
Host: pagan.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pagan.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Mar 2025 15:57:02 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 28 Feb 2025 19:19:23 GMT
ETag: "1877-62f38af2878c5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2860
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|