| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc7a8ba48383a0e56baca8c8c41b81a04 b04c1f1e730a71f17ff639c9db697c532d4e5421 7860552382285e6eddddc5226c6f6400caa3f6fc3cb4b8a2d550c6fc653f78bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7860552382285E6EDDDDC5226C6F6400CAA3F6FC3CB4B8A2D550C6FC653F78BB"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4513
Expires: Mon, 07 Nov 2022 00:22:11 GMT
Date: Sun, 06 Nov 2022 23:06:58 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash05978511215be8462d0b69e33b3a91a3 61535ba131d547f1c5108d9e7763ee3fc8d8c824 cfdbf0f9e88e3c1ae8eb03e46c352633a75d4b2edbfbd57c1c6b52ff1623a109
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4908
Cache-Control: max-age=132353
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:06:58 GMT
Etag: "63678ce7-1d7"
Expires: Tue, 08 Nov 2022 11:52:51 GMT
Last-Modified: Sun, 06 Nov 2022 10:31:03 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd8c32b2fb818533a5b3fe5c69157bde9 93594fd3fc50d9d444c28660eabba1edbe4f0588 df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2292
Expires: Sun, 06 Nov 2022 23:45:10 GMT
Date: Sun, 06 Nov 2022 23:06:58 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YNZjNrp+cKbUOPOyvNVUlYdnyHK0UCsxPkZkOsqSL1kUwxkUI+pAUuadxHpxKlrOLOXUr4smS7U=
x-amz-request-id: HK3GPX7EZ7ACS8QM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 22:47:48 GMT
age: 1151
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 23:06:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash78ed707f4b676b764febb962568a740f 59ecc9597499e35022fc209513c00c34a70288e4 859aff07812e3aa66db0530babeee604dfa9808ab4399b2b3d909325786a03ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "859AFF07812E3AA66DB0530BABEEE604DFA9808AB4399B2B3D909325786A03FF"
Last-Modified: Fri, 04 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21574
Expires: Mon, 07 Nov 2022 05:06:33 GMT
Date: Sun, 06 Nov 2022 23:06:59 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd862f992e9902530594e7aca425f129b 25b414fe833d30b52928535d659a1ee281b82e3a 0c6286152fe8bb5fdf1505f2001d530a65ee53aa6d9601bbb1eecb683036071d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3244
Cache-Control: max-age=125636
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:06:59 GMT
Etag: "6367792b-1d7"
Expires: Tue, 08 Nov 2022 10:00:55 GMT
Last-Modified: Sun, 06 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| ssleatherhandicraft.com/sl/csisniibialfitdla | 162.215.254.72 | 301 Moved Permanently | 0 B |
URL HTTP/2ssleatherhandicraft.com/sl/csisniibialfitdla IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /sl/csisniibialfitdla HTTP/1.1
Host: ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Sun, 06 Nov 2022 23:06:59 GMT
server: Apache
content-type: text/html; charset=UTF-8
content-length: 0
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
x-server-cache: true
x-proxy-cache: MISS
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 34.212.166.60 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.212.166.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Rn2JjBlihdGwox0OW00OBA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vElOOM3T0nGIqVLGvrD22fxBDdY=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21 | 162.215.254.72 | 200 OK | 1.3 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hashc88f14c811c9f2b6d8b7487a2fc8c8be bb408fad1c068443c1b78b5454fa6f972d87013d 27a4098ecf1b0c73c516b807ba8581aebe06d9d3cf13f65512aeab9cdd57b7e6
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=1.4.21 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1335
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Lato:100,300,400,700,900,100italic,300italic,400italic,700italic,900italic&display=swap&ver=1666759548 | 142.250.74.10 | 200 OK | 1.0 kB |
URL HTTP/2fonts.googleapis.com/css?family=Lato:100,300,400,700,900,100italic,300italic,400italic,700italic,900italic&display=swap&ver=1666759548 IP142.250.74.10:0
Hash952d8c33077a58e67fab084358e675a7 21242cf150fc014c460631c06ba18e74bde73b5a fd142a27c50585b09a6fd95ab2534969851bb346d9519e7c2ab0bd2505be65c6
GET /css?family=Lato:100,300,400,700,900,100italic,300italic,400italic,700italic,900italic&display=swap&ver=1666759548 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 06 Nov 2022 23:07:00 GMT
date: Sun, 06 Nov 2022 23:07:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashbf55a5e3b388533c18f4eed310ed28b9 3d9564cad00a8349f63a5c72118b0776524d0eb7 97c32c42968f5f4acf571408533a411b992720182a1477dc95fd792eedbcc624
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.ssleatherhandicraft.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 | 162.215.254.72 | 200 OK | 17 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (43771) Hash2a67a4888baa44de739f3fe56203ce07 da175eae57f26b655747d79f055477e3fee1abb9 3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 12:05:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/style.css?ver=6.0.3 | 162.215.254.72 | 200 OK | 460 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/style.css?ver=6.0.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (304) Hash5ecd32946ab24b02f9af3d5681aa2e8a ac666fd5f24a807051211f9be4cb4cf965b0852c cc2b644f6c79af192c71474cfb90e7a83c031fa77ed8ca9689305406dbf8cf76
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/style.css?ver=6.0.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 460
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.5.2 | 162.215.254.72 | 200 OK | 3.0 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.5.2 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (10435), with no line terminators Hasha6099ee677b6d930b6b878cf0cb08422 a2eb69454196d4250d624d25aaec587e97686642 755acd6dc98e63baff6d8b105b1bcaf63b79f935381fb3f32a79dace7faae0ac
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.5.2 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2985
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/font-awesome.min.css?ver=4.7.0 | 162.215.254.72 | 200 OK | 7.1 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/font-awesome.min.css?ver=4.7.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (30837) Hash82a55032c4b614390aea6ef6870d3e90 bb21577feea531540a8d4f27ac3730ffac111e1b 4f068500ef9ef0dbffa5b76ac10f1970a7a9de8ff033f84228971a140eb20069
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7114
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/woocommerce.css?ver=3.4.5 | 162.215.254.72 | 200 OK | 11 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/woocommerce.css?ver=3.4.5 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeUnicode text, UTF-8 text, with very long lines (51700), with no line terminators Hash157f40794bbc4e7af532bcd73fa79797 5ae5b6092aeefadb02efc30df16989d9d1c2d954 7bad965e85f3c59f1c30a503bd3ef7146b76e8d21145b8e6c0c0429a7ba72f2f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/woocommerce.css?ver=3.4.5 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10814
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LfBF8YUAAAAAIV4lxIt8JkYTZE4x531CqNJ0aR2&ver=3.0 | 142.250.74.164 | 400 Bad Request | 119 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LfBF8YUAAAAAIV4lxIt8JkYTZE4x531CqNJ0aR2&ver=3.0 IP142.250.74.164:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text Hash96612d2b1b529ecfcf09798c3eb100bf 4f32d5d3ccf4d44ae71309dfa8d6f9d396614a27 7c58bfa17d0c600b7455e6bfb3d8371fbf93da20a7a53ed1efad37d692f1cba0
GET /recaptcha/api.js?render=6LfBF8YUAAAAAIV4lxIt8JkYTZE4x531CqNJ0aR2&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sun, 06 Nov 2022 23:07:00 GMT
expires: Sun, 06 Nov 2022 23:07:00 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 119
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LccLU4hAAAAAAeyAWrtY6jAvF89RcLu7HHR27bO&ver=6.0.3 | 142.250.74.164 | 200 OK | 585 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LccLU4hAAAAAAeyAWrtY6jAvF89RcLu7HHR27bO&ver=6.0.3 IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hash52f9acac69af627d795c8cf184cecbf7 125c78700b6aedc575d8903c31bb330009f9139b 08acf9a83714d7422fed54850b6e733bc5ba75dc31095126babb4533b27a5489
GET /recaptcha/api.js?render=6LccLU4hAAAAAAeyAWrtY6jAvF89RcLu7HHR27bO&ver=6.0.3 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 06 Nov 2022 23:07:00 GMT
date: Sun, 06 Nov 2022 23:07:00 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3849d297978f9334d294adc6e87ace82 6a45655d6b8da63381537bcf2ea8c2cf6ecc4dc0 2ebf3ed3cc8c16602d23c4058816cc0691bb3a950c067b18b774d8772a1c7c6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/bootstrap.min.css?ver=4.0.0 | 162.215.254.72 | 200 OK | 32 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/bootstrap.min.css?ver=4.0.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hash493feeaef480dfaf8a293a7f56d00a42 9730da8de49a45743f745a17dc002862fba21ac5 74cb2915b003625983daca6a1a9dc4a9349f65e993aeecd50fa58d6a23306cd6
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/bootstrap.min.css?ver=4.0.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3bf1a5e65cd048b761eac5cb0b52048a f64cface851717dee160a5c6fad975cc34fe4cd2 8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5309
Expires: Mon, 07 Nov 2022 00:35:29 GMT
Date: Sun, 06 Nov 2022 23:07:00 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4e2853cc6ec6223160471401e6871f4b f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3fDf4aoep5tTAusisXhIdAf0A6SbpM5fYtYaiXtNSb0-VRJo5nu8Vg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 09:11:34 GMT
age: 50127
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce407165-4cf5-4a06-b191-964755c49697.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce407165-4cf5-4a06-b191-964755c49697.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0518cc57d2cfd5ac6af952483a879e35 78e79bcbfb7ce1ae0101dff32bf43e32e7c705e9 23c95e2d379463858da33db969bc8a40ce7dad4f8a1715b1578f9ea54032905c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce407165-4cf5-4a06-b191-964755c49697.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4497
x-amzn-requestid: 097ebf8b-818f-44b3-bd68-b9e4657b0844
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bDQ_AEgzoAMFqeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636461f9-50ce5fe965ad106d4b3e2770;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 00:51:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: h9lgny-UQb9RJsW_8afWGOPgvcXJrugxZc8FnpvcvCxyE3Fe86cObw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 10:15:22 GMT
age: 46299
etag: "78e79bcbfb7ce1ae0101dff32bf43e32e7c705e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc0a079a6dfb70fb2a2d6b5aff7103f73 55ffd5d6cb8074bdbdb8d06719119021bc81aeab 196ffd4e5245355c1c5d67f49b28200630ccfe1e4ebaa7280154b7adaf39b18f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9435
x-amzn-requestid: 7c39c00f-1362-44c1-9628-749045e542b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIU9G5gIAMFzZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364ba85-57fbfb872251c37f4137b262;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:08:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GaFmcnh2vF0lCj_QPQ7SAIT_UzHHyr8UaHa-R_ifuZsX7quU0mBJ9Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:50:59 GMT
age: 4562
etag: "55ffd5d6cb8074bdbdb8d06719119021bc81aeab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ef544a0-c6ca-407f-9267-0d760303f311.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ef544a0-c6ca-407f-9267-0d760303f311.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd09300bebcacbd170aa8f6393d1b43f0 18b3df299b9f22f9cfda5e7b38a89c551cef1c6b 231bccdfaab237920fa122e71d45a62713792f9e02503e4eba0fcf72dd2f323a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ef544a0-c6ca-407f-9267-0d760303f311.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9066
x-amzn-requestid: 84bc4739-ecab-4480-a653-8c6fc3653ab9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtVSF5loAMFl7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636828ee-67bb1f4f589c4a025c76b37c;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nuzxMssilttroAKbCMrTiev3U86UyeAgeLI-ebaL1jkzRbU_seZ9tA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:39:31 GMT
age: 5250
etag: "18b3df299b9f22f9cfda5e7b38a89c551cef1c6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/owl.carousel.min.css?ver=2.3.4 | 162.215.254.72 | 200 OK | 1.1 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/owl.carousel.min.css?ver=2.3.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (3184) Hash8110dac83703c6f3bdab05005b338dae 2d7fa29ab9e77366216866a3c399cff917625015 8b88b876325a3b5deaea39fc31f97d9ea452bf5f5a27a4eb0d0cdc5be386fb92
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1142
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1190aa1b3db742f1cc476e53b34479b7 7e7ba87cfbc21acc28219c68521eedd6d3f614a0 6724e0c14b11cf9ef8c2050116115e5f7985f744184a7d2e8ea4c0189bd1997d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7309
x-amzn-requestid: 0d1c4df8-769e-497b-999c-b1087d79dfe4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLIGGWHIAMFhiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63672566-1745417f7ed16a0576321e03;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:09:26 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rF6bOFd4PB_SSpgbGJP5sMyVVrnzdq0gZ1JI-6AZ1iULsnK-BRHLZQ==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 03:23:20 GMT
age: 71021
etag: "7e7ba87cfbc21acc28219c68521eedd6d3f614a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/magnific-popup.css?ver=1.1.0 | 162.215.254.72 | 200 OK | 2.2 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/magnific-popup.css?ver=1.1.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hash5691b07253c4a30382130c2da4be8343 4c12d34016c7061965c996599c4086683958e0f1 095326e797678e4aa4be8217bf991180f7b79cdcce552897123ffa68981a0747
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/magnific-popup.css?ver=1.1.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2190
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa958db65-71f7-4c79-9753-9af1fe88477b.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa958db65-71f7-4c79-9753-9af1fe88477b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a5e060b41bd5313b1cf828c1d5ecbcc e63e4bee84953491236a8261ef07b5a4743fa891 e8750b0156ed980f11682d92f5c60ce2783518b37f156e74340617a74d826813
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa958db65-71f7-4c79-9753-9af1fe88477b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13224
x-amzn-requestid: d6c8a626-313d-4add-9467-eb946a38262a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a9iPHEkgoAMF1Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6362172d-1be7a03a1b288dec56281915;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 07:07:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: R2vHbrKm_n2kWK3bG4htWAIqi1YNjNjaX8LG5AWWHPlKnaWi6JAGzA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 20:12:14 GMT
age: 10487
etag: "e63e4bee84953491236a8261ef07b5a4743fa891"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.20.0 | 162.215.254.72 | 200 OK | 2.1 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.20.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (4602), with no line terminators Hashab46a661940b340e6dc8167a5b28f898 2cf5d7403e705d20979b2a8fafc151baa5f3e521 fbd8ba0ef0ed7f3e0133029f8a83e8a7f3317c2b1fce86e93afe93de54e820aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.20.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2073
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/wordfence/modules/login-security/css/login.1664898183.css?ver=1.0.11 | 162.215.254.72 | 200 OK | 964 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/wordfence/modules/login-security/css/login.1664898183.css?ver=1.0.11 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (2624) Hash454a9d416f155f0302b5fc38f0a674c6 775c6238a1da4370d4f00dbedcfc5c91d8581abc 000b43fbaab4993af43d4ecfbde4356d60298c2c246e21cdffef82146e69e473
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/wordfence/modules/login-security/css/login.1664898183.css?ver=1.0.11 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 04 Oct 2022 16:25:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 964
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 162.215.254.72 | 200 OK | 4.6 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/animate.min.css?ver=4.1.1 | 162.215.254.72 | 200 OK | 7.1 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/animate.min.css?ver=4.1.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (65347) Hash0bef799c33a4cb6397d6e3d9db5a6a04 5ad813272fcc2092311364ac6a1e15ba9c74ff45 0a20956c64469567e92c309ec798b9cb7acea201ef39acd7c1dc376e58c27a8b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/animate.min.css?ver=4.1.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7141
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/pls-font.min.css?ver=1.0 | 162.215.254.72 | 200 OK | 2.9 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/pls-font.min.css?ver=1.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (14426), with no line terminators Hash700fc411d3de9caed8f130ad093932f5 a82871a92ac6b2af762b74c5f8f2b767d5cc0468 c0cb451b2dda92f986193fa795c5dae25fbc4788cae2de11b57bfd16c4268273
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/pls-font.min.css?ver=1.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2860
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.1 | 162.215.254.72 | 200 OK | 792 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (2139), with no line terminators Hash1ca3f41c13e0027acc45f0601f8b640f cced34af0c6a59e9cee4229faa66ab39c7031506 d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/sl/csisniibialfitdla | 162.215.254.72 | 404 Not Found | 50 kB |
URL HTTP/2www.ssleatherhandicraft.com/sl/csisniibialfitdla IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hash41a19b3ed1e4778c5936bf109c6b36cd 94ad0e060744b2108ba1dffb1322ede39f24e285 a40fb13416c29c157e2762ead123f00fd53671e55654d3a8070906c2793c5d1a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /sl/csisniibialfitdla HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.ssleatherhandicraft.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.1 | 162.215.254.72 | 200 OK | 1.0 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (1668) Hash0bebfb5722cbc8ac04e62aa40698be49 3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/hideMaxListItem-min.js?ver=1.36 | 162.215.254.72 | 200 OK | 706 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/hideMaxListItem-min.js?ver=1.36 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with very long lines (1177) Hashc7e357bd0ed9f8742cd4fd4592afc1b6 1e6b803d6437d4cb0c9e44bcf7dd25fd9254af79 891360cf7336b4b4684b70eb2f4a191d82fd8ece7e9f74c6e011883ff1d140b9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/hideMaxListItem-min.js?ver=1.36 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 706
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/js/wp-util.min.js?ver=6.0.3 | 162.215.254.72 | 200 OK | 709 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/js/wp-util.min.js?ver=6.0.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (1305) Hashe9edb7bac979409cf7dbc48d7ab8aca7 ed3f941a8fe41e3994a3ca5e620219328628f532 2a0742cad9937c742b2f51c1ea2ae48359ce8d88d8b56f6d8910c0a267d631b5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-util.min.js?ver=6.0.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 25 Jun 2021 20:20:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 709
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/js/underscore.min.js?ver=1.13.3 | 162.215.254.72 | 200 OK | 8.3 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/js/underscore.min.js?ver=1.13.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (18876) Hash61a4a3c276f704185a925bfa0f4d8b1b 0176eb701bb114d9cb170193f6208ec4fbb35f71 f0875cbb46e9eeb5e497dd52d8c33725509228193c2dbe9ab464f62a15c2f0e2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 14:42:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8313
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/jquery.magnific-popup.min.js?ver=1.1.0 | 162.215.254.72 | 200 OK | 9.2 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/jquery.magnific-popup.min.js?ver=1.1.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (20087) Hash7a10ae63b238729dc4da7f7bd8986219 654c47168dca0ec7080f6c57e8c4482b57f879d4 b782185399b361358f7c409d6f23f22d45f695dcbb63876c35752c7b1de72db3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/jquery.magnific-popup.min.js?ver=1.1.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9204
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Lato%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i&subset=latin%2Clatin-ext | 142.250.74.10 | 200 OK | 3.0 kB |
URL HTTP/2fonts.googleapis.com/css?family=Lato%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i&subset=latin%2Clatin-ext IP142.250.74.10:0
File typeASCII text, with very long lines (4890) Hash51684f5bad2e3a95abba9b75df496577 c28272532da0031b59eb700058f416c76959d45c b2ace9d6dcfbd08b04bffa3bb450ccc7e2657e950a3a9c7449c582a2e36dc809
GET /css?family=Lato%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 06 Nov 2022 23:07:00 GMT
date: Sun, 06 Nov 2022 23:07:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.1 | 162.215.254.72 | 200 OK | 1.1 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (2938), with no line terminators Hash769e9d3f7fc383ec1a02024e39730474 4f5a5edf28ed19b48c5e40747ec6896f0df8f09e 4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/jquery.nanoscroller.min.js?ver=0.8.7 | 162.215.254.72 | 200 OK | 3.8 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/jquery.nanoscroller.min.js?ver=0.8.7 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (10265) Hashce9e3c2ed90bcfcb9a6b4b9a0bb6ecef a6471953a6658dd373fd38c2a84448557d36d401 55c906e8ce486f39fc4c14263724fb2e12c8c0e7988ba5d4642ce9157ebc8042
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/jquery.nanoscroller.min.js?ver=0.8.7 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3848
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.8.0 | 162.215.254.72 | 200 OK | 7.1 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.8.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (19905) Hash11c71ebe3b5ee1cc9acd2fcfd152f186 2b36c7b86094a60c194187c30273fd4434b9ed6b ac582bbaaf2eedfff77b28db99253070f31d0262e3c8ca7751cbfdb0ba1fa6f4
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.8.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:29:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7084
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.1 | 162.215.254.72 | 200 OK | 1.2 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hash267e8958dbad03e5b8e684648aa15aa2 fb81c3ab32d537817004715e011c33f2f7efaa81 8d2937738bf3b55c9ec65b0f2429361d4a2b0679f52ef2b9700192ae20acb03e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1202
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14 | 162.215.254.72 | 200 OK | 16 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeUnicode text, UTF-8 text, with very long lines (12602) Hashef1f75a7e3a95466dbb541342d218497 aee4425ad15662a4a27ba4806773aee46be6b259 337aa9ca7c55b6580203aa0cfef8be8e42deb5441faacb9be21c0107347d3388
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:29:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16398
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 | 162.215.254.72 | 200 OK | 7.3 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with very long lines (21310), with no line terminators Hash442f178b97cc7dc7fac8cf0444afd364 f135cc89cc3d6308d2d3c7dfb3f04a595116c245 d3220d63ec2995c7ce09e37c2495915fbd30721c4ea94bdaab42310ff44b926b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7256
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/popper.min.js?ver=4.0.0 | 162.215.254.72 | 200 OK | 8.6 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/popper.min.js?ver=4.0.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (20164) Hashe925f1138c9f66c8df7a83d42b17c413 4a75084a1b4ae20faa7dcee11699d211f3880ed9 7e44d14407808b8b0637aeb43489556e3180998d80f68467aeb1806c2af05f42
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/popper.min.js?ver=4.0.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8578
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/jquery.autocomplete.min.js?ver=1.4.11 | 162.215.254.72 | 200 OK | 5.3 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/jquery.autocomplete.min.js?ver=1.4.11 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (13072) Hashece36028d9a20606619ca2c05618a7cd 9d74998ede69aec5a82e56cb5e5d20c5015e7766 5113ae1f551e85f038fcdfd6156d3ba7d34d9d34d344b2501b8615ba93f8c808
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/jquery.autocomplete.min.js?ver=1.4.11 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5284
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/slick.min.js?ver=1.9.0 | 162.215.254.72 | 200 OK | 15 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/slick.min.js?ver=1.9.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (32026) Hash824eca395709674b3debb778a26436c1 1d9369df487d74c09385059ba3f3e3bb9f4ff1e3 ca5216fc5ed4fcf995bce1a4e695f803e892f63058bb9180494b53956594c53d
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/slick.min.js?ver=1.9.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14663
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/owl.carousel.min.js?ver=2.3.4 | 162.215.254.72 | 200 OK | 16 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/owl.carousel.min.js?ver=2.3.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (31997) Hash8a2ba9702fb3cca3c84924959fff383d ec7e32b952d84e211870dd0e9f1520582e3b4270 ebcdf76e9e513c320785d95cbfa122a4aaa6143fc8ea69a2ea0dedf0277828b8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15883
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21 | 162.215.254.72 | 200 OK | 5.4 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (11827) Hash173ea58c0283b2717e06e9b74c4b4282 81c26ae45f510500e7ad8feaac309484bff6c362 faf0a862710d0ca6dcfa6cc50767f9cab591b5a685d268b7c7b5cb696b2df15b
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5389
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.8.0 | 162.215.254.72 | 200 OK | 372 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.8.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hash0507d06596355ea2efd09bb9c5b0e46c 9ae0e8f7847222b09264ada703c182fd89011126 fefb5c10a704ffcb6c905a785ec2af387ff7169dbe548fa4784cc5782797d4c2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.8.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:29:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 372
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.1 | 162.215.254.72 | 200 OK | 4.0 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (9115) Hash30e4855ccd2fde73cd01838d073b8d4b aa39e03ffb6e39bf82b6a04d72e3f7cf7509f778 cbcfd79d48b4735b59e17b77cb3930f8a51fcdcb3d4675718a45af6077469636
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3955
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 | 162.215.254.72 | 200 OK | 4.9 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeUnicode text, UTF-8 text, with very long lines (14924), with no line terminators Hash1d777bdd8d096b6dc90a1181c6b564fd 9fb6f0a8be1d12c80100d3e61a4d3d3482ad4c76 06d2d0d6e48f958929d6035eb16b3e7a7d73f19c548b324546c54bc6853e8820
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Oct 2022 16:20:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4877
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.14.0 | 162.215.254.72 | 200 OK | 9.4 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.14.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with very long lines (24951), with no line terminators Hash6d2ebadcf4496f03ee153215e6af7193 ac396b45d5770afd86ca93eafba8b0bf725468af 1d5c56ff3f3e8516fea460dc7fbc9ce95b44dc56de0e9c43d96b38e0d589f78c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.14.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Oct 2022 16:20:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9365
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/uploads/2022/01/logo.png | 162.215.254.72 | 200 OK | 27 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/uploads/2022/01/logo.png IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typePNG image data, 229 x 85, 8-bit/color RGBA, interlaced\012- data Hash57a46372ecf2d8066a9353d0472409e0 04fb558c149275b992f14da64fe590bc275a173f 8cebd81a4c789e1f911e5bb71fbc5f5e545687673280e06aadc2e64cf7f7a580
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/01/logo.png HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 26 Jan 2022 09:32:16 GMT
accept-ranges: bytes
content-length: 27036
content-type: image/png
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.0.1 | 162.215.254.72 | 200 OK | 4.6 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.0.1 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (13887), with no line terminators Hash4d728e71811e2eec3160d805315170dc 1a2ebcf16c0e29b7ae388187f4dd528e671fec5e 53ce82cb57a4d3fa593c481a1788d16cc939d0d7b0b7fa2f7c914e8cfbf77b1c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.0.1 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4621
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 162.215.254.72 | 200 OK | 2.7 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (6475), with no line terminators Hash45bd1d6f7fc3a4069fc6fd400b90c961 903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 14:42:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2675
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/wordfence/modules/login-security/js/login.1664898183.js?ver=1.0.11 | 162.215.254.72 | 200 OK | 6.5 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/wordfence/modules/login-security/js/login.1664898183.js?ver=1.0.11 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeASCII text, with very long lines (5386) Hashbaf5ac181f420c87a5d368d365bc652a 7e922355cc3d268399c99b79932f09dcee76f82f 2b91d09bf56fda2b16d6b844614ef3fd46471cbb6629bb9886758420bc9cd189
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/wordfence/modules/login-security/js/login.1664898183.js?ver=1.0.11 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 04 Oct 2022 16:25:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6462
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 162.215.254.72 | 200 OK | 8.3 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeUnicode text, UTF-8 text, with very long lines (19138), with no line terminators Hashe49f0561a452c9d04fb7d1510a23cc8c 9e8fc2e3129da4fe2790eee565a6478b864bea83 ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jun 2022 14:42:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8254
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6dba1915540598e77ae8d73ce49c4b3b f9c34b678d814548946cafea65b20ff352fb501b 89f7e3ac689535c3a373e1ff2f4125e7879782917687c26210a3eaf6c9a6e6a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 216.58.207.195 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ssleatherhandicraft.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 17:10:21 GMT
expires: Wed, 01 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 453400
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 | 216.58.207.195 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Hashde69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ssleatherhandicraft.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 17:10:21 GMT
expires: Wed, 01 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 453400
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce-paypal-payments/modules/ppcp-button/assets/js/button.js?ver=1.9.4 | 162.215.254.72 | 200 OK | 58 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce-paypal-payments/modules/ppcp-button/assets/js/button.js?ver=1.9.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Hasheec304bf1a4189cf7f20c807aa205cb4 d56132cc4a2e7226f273a8aa2430d746b32a62e9 6808c86a99b21af9cf9aa62c5c1d7534155e72d9fb6b22602b426603d42cf708
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce-paypal-payments/modules/ppcp-button/assets/js/button.js?ver=1.9.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Oct 2022 15:42:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/images/select-bg.svg | 162.215.254.72 | 200 OK | 405 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/images/select-bg.svg IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (405), with no line terminators Hash1c387339920f4d0e96f601d25b9e1bef 2aa1487c1416845dfab24e800e09dd087b783f00 801bbecfe24ea20eb49f8d9bbada36d10d17b1389f13ff46152c6119612cfb8f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/images/select-bg.svg HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/style.css?ver=6.0.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
content-length: 405
content-type: image/svg+xml
date: Sun, 06 Nov 2022 23:07:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ssleatherhandicraft.com/wp-content/uploads/2022/06/Dark-And-Beige-Elegant-Mens-Watches-Collections-Instagram-Post-2-1.png?id=2216 | 162.215.254.72 | 200 OK | 216 kB |
URL HTTP/2ssleatherhandicraft.com/wp-content/uploads/2022/06/Dark-And-Beige-Elegant-Mens-Watches-Collections-Instagram-Post-2-1.png?id=2216 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typePNG image data, 1200 x 700, 8-bit/color RGBA, non-interlaced\012- data Size216 kB (216535 bytes) Hash462bac5e76fed9f1dd5a4d15ac4d8e4c d5e817ff9d45c5e8bcac6d243e4fdde229cf61d6 3fdb492104ac00b7d9ff51dd03157141872cde90d1589d884b6d8520fb1b4409
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/06/Dark-And-Beige-Elegant-Mens-Watches-Collections-Instagram-Post-2-1.png?id=2216 HTTP/1.1
Host: ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Jun 2022 14:18:55 GMT
accept-ranges: bytes
content-length: 216535
content-type: image/png
date: Sun, 06 Nov 2022 23:07:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/uploads/2022/01/handbag-g4c282e84b_1920.jpg | 162.215.254.72 | 200 OK | 384 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/uploads/2022/01/handbag-g4c282e84b_1920.jpg IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1920x1280, components 3\012- data Size384 kB (384019 bytes) Hashf29a3f83bef4235ebcd666f7c88a878d 4bd57626f755a3b95765f3b08a72e8a3f33dd4f5 0838640f36b2db0dcfcf6e1920e18a8afb19dc724bbef37a3c29852073a3d0ad
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/01/handbag-g4c282e84b_1920.jpg HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Jan 2022 14:41:16 GMT
accept-ranges: bytes
content-length: 384019
content-type: image/jpeg
date: Sun, 06 Nov 2022 23:07:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6dba1915540598e77ae8d73ce49c4b3b f9c34b678d814548946cafea65b20ff352fb501b 89f7e3ac689535c3a373e1ff2f4125e7879782917687c26210a3eaf6c9a6e6a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14 | 162.215.254.72 | 200 OK | 136 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
Size136 kB (136476 bytes) Hash689344fb2394a4cfc07b18cacaf4acf4 b32cf4d34bfa601aebc7c80ad45a3ba6ebfd4cf3 d0bbaadee8d6ad0d0126b4faca3eff5794eaa48c04a6d0131f671492af9426ad
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:29:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/fonts/pls-font.ttf?h2l1iy | 162.215.254.72 | 200 OK | 120 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/fonts/pls-font.ttf?h2l1iy IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, pls-font \012- data Size120 kB (119464 bytes) Hashfe8772fc496593b1cc702f2d661f3631 c6b59f676939570555f67032c64aa7166888fa49 d2edda396944889be32560d511d7a6ff48188a158969d743118028247b311646
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/fonts/pls-font.ttf?h2l1iy HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/pls-font.min.css?ver=1.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 06 Nov 2022 23:07:01 GMT
server: Apache
content-type: font/ttf
content-length: 119464
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
x-server-cache: true
x-proxy-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:01 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/images/transparent.png | 162.215.254.72 | 200 OK | 72 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/images/transparent.png IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typePNG image data, 4 x 4, 8-bit/color RGB, non-interlaced\012- data Hashf0b5dd29f1be8723594e1d528e95baae 8b9c5ef9337ee586aad7e56c8fc33eebc14c2cdb 4f8f48e5946e7efee0737732d9bf777ff8e71ca451d2a6a124b137fe74085d1d
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/images/transparent.png HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
content-length: 72
content-type: image/png
date: Sun, 06 Nov 2022 23:07:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 | 162.215.254.72 | 409 Conflict | 83 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js | 142.250.74.163 | 200 OK | 162 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (590) Size162 kB (162282 bytes) Hash05e06c50dab6f3d7f8bfde22301888db 64b3c20c788d298a672fabf9627eac914d95ed08 95176711feca1110e764a31e36764d5b331b033ed56fb372b42250329b33e1d6
GET /recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ssleatherhandicraft.com
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162282
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 06 Nov 2022 18:39:30 GMT
expires: Mon, 06 Nov 2023 18:39:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 31 Oct 2022 04:02:45 GMT
content-type: text/javascript
age: 16052
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/?wc-ajax=get_refreshed_fragments | 162.215.254.72 | 200 OK | 369 B |
URL HTTP/2www.ssleatherhandicraft.com/?wc-ajax=get_refreshed_fragments IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeJSON data\012- , ASCII text, with very long lines (853), with no line terminators Hash9c209821f0579f7d90f3b350d4fec914 a5669bb11f7ba08dde1901fe1829ada857db5277 15517a3ce6a2ccc818c6db6cf8454b5af6a3296faa86db2376b0b0c7bd6ddad0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.ssleatherhandicraft.com
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.ssleatherhandicraft.com
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
vary: Accept-Encoding
content-encoding: gzip
content-length: 369
content-type: application/json; charset=UTF-8
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/uploads/favicon-logo.png | 162.215.254.72 | 200 OK | 146 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/uploads/favicon-logo.png IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typePNG image data, 779 x 764, 8-bit/color RGBA, non-interlaced\012- data Size146 kB (145635 bytes) Hashce7fc399acb02c5705e73358b6de5ccb 0d273b26af27bd169661c913ce86fcfcbba9819b d7c546c4f12b0f0f7395f177f018b7dcab4ac17e90fb4d44ebe9b9281c261c29
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/favicon-logo.png HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 Oct 2022 02:23:58 GMT
accept-ranges: bytes
content-length: 145635
content-type: image/png
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 12:31:58 GMT
expires: Sun, 05 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 124504
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:46:16 GMT
expires: Fri, 03 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 264046
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/?wc-ajax=ppc-data-client-id | 162.215.254.72 | 200 OK | 470 B |
URL HTTP/2www.ssleatherhandicraft.com/?wc-ajax=ppc-data-client-id IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typeJSON data\012- , ASCII text, with very long lines (573), with no line terminators Hash9140b58b8200cb77c2435a362f5429ea e85208e4b4f6be5a302e20c2b90355dd43321ddb e8b46ef3b2c73a7f19586204fcd14c8530ae90a741f22b98dc4050aa690c91d7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
POST /?wc-ajax=ppc-data-client-id HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Content-Type: text/plain;charset=UTF-8
Origin: https://www.ssleatherhandicraft.com
Content-Length: 22
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.ssleatherhandicraft.com
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
vary: Accept-Encoding
content-encoding: gzip
content-length: 470
content-type: application/json; charset=UTF-8
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/uploads/2022/06/Wallet-Product-Showcase-Instagram-Post-150x150.png | 162.215.254.72 | 200 OK | 23 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/uploads/2022/06/Wallet-Product-Showcase-Instagram-Post-150x150.png IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hashd3639977a558e4e1702fafa3a3d79081 d72a97234f31e5402fa19708d660bb5fcba01e93 574bb130a0496364709ad491c7f75c2a10ab1b04c2d615bd9256b9fdbd0f19d6
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/06/Wallet-Product-Showcase-Instagram-Post-150x150.png HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Jun 2022 15:52:05 GMT
accept-ranges: bytes
content-length: 22947
content-type: image/png
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/uploads/2022/06/Dark-And-Beige-Elegant-Mens-Watches-Collections-Instagram-Post-1.png | 162.215.254.72 | 200 OK | 78 kB |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/uploads/2022/06/Dark-And-Beige-Elegant-Mens-Watches-Collections-Instagram-Post-1.png IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
File typePNG image data, 210 x 470, 8-bit colormap, non-interlaced\012- data Hash0c6474258b6dda52b4a59f5789ed908f 2264ae5baa639c4a35a0ac824416f8bf7c78a460 b29ecbe611a8df3099703eef39668e2b57e9989c203f0ccf5425c7fe7cba3c17
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/06/Dark-And-Beige-Elegant-Mens-Watches-Collections-Instagram-Post-1.png HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Jun 2022 13:33:10 GMT
accept-ranges: bytes
content-length: 77833
content-type: image/png
date: Sun, 06 Nov 2022 23:07:02 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfd18f82baf167da783ce3b21d9a78ac4 abe5076482b388cc799e94baac0212fbcf8ef822 674fbff3d78c948fe9bc962f906ee9458a8aac2e443003ddf3a70420a42dcd09
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5796
Cache-Control: max-age=96535
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:07:03 GMT
Etag: "6366fd8a-1d7"
Expires: Tue, 08 Nov 2022 01:55:58 GMT
Last-Modified: Sun, 06 Nov 2022 00:19:22 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| www.paypal.com/sdk/js?client-id=AVglMdi0_2DXK7luZsUdRMf6RFw4Nck1uVz8DPFoEqILdCR8sEuwsAmUNqt_R7BEKF2i7_tEFEPrR9Y-¤cy=INR&integration-date=2022-04-13&components=buttons,funding-eligibility&vault=true&commit=false&intent=capture&disable-funding=card&enable-funding=venmo,paylater | 151.101.129.21 | 200 OK | 91 kB |
URL HTTP/2www.paypal.com/sdk/js?client-id=AVglMdi0_2DXK7luZsUdRMf6RFw4Nck1uVz8DPFoEqILdCR8sEuwsAmUNqt_R7BEKF2i7_tEFEPrR9Y-¤cy=INR&integration-date=2022-04-13&components=buttons,funding-eligibility&vault=true&commit=false&intent=capture&disable-funding=card&enable-funding=venmo,paylater IP151.101.129.21:0
File typeASCII text, with very long lines (65472) Hash2b1519e82eabc9a259d5ba3bf66fbbee afac1b969a2cff2997cf8ab7bfb9db18d6486815 b50d13a90fa38d9df7f0eb5449dab15c5f4e5be7417df5158c6224d499ba48c3
GET /sdk/js?client-id=AVglMdi0_2DXK7luZsUdRMf6RFw4Nck1uVz8DPFoEqILdCR8sEuwsAmUNqt_R7BEKF2i7_tEFEPrR9Y-¤cy=INR&integration-date=2022-04-13&components=buttons,funding-eligibility&vault=true&commit=false&intent=capture&disable-funding=card&enable-funding=venmo,paylater HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-UctyOw4HClwyMNq3iJ8YVBgpXthKpcfA7xCToRfJLALrBkMy' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-UctyOw4HClwyMNq3iJ8YVBgpXthKpcfA7xCToRfJLALrBkMy' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"16246-r6wblpos/ymXz4q3v7nbGNZIaBU"
p3p: true
paypal-debug-id: f2327527fdef6
traceparent: 00-0000000000000000000f2327527fdef6-f6b242200d839232-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 06 Nov 2022 23:07:04 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11537-HHN, cache-bma1677-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1667776023.162499,VS0,VE931
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f2327527fdef6-befc004557de8b3a-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 90694
X-Firefox-Spdy: h2
|
|
| www.paypal.com/tagmanager/pptm.js?id=www.ssleatherhandicraft.com&t=xo&v=5.0.338&source=payments_sdk&client_id=AVglMdi0_2DXK7luZsUdRMf6RFw4Nck1uVz8DPFoEqILdCR8sEuwsAmUNqt_R7BEKF2i7_tEFEPrR9Y-&comp=buttons,funding-eligibility&vault=true | 151.101.129.21 | 200 OK | 4.3 kB |
URL HTTP/2www.paypal.com/tagmanager/pptm.js?id=www.ssleatherhandicraft.com&t=xo&v=5.0.338&source=payments_sdk&client_id=AVglMdi0_2DXK7luZsUdRMf6RFw4Nck1uVz8DPFoEqILdCR8sEuwsAmUNqt_R7BEKF2i7_tEFEPrR9Y-&comp=buttons,funding-eligibility&vault=true IP151.101.129.21:0
File typeASCII text, with very long lines (12084), with no line terminators Hashda1b94bdea2eb1769e74df6fbd2c1a2e 4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7 45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
GET /tagmanager/pptm.js?id=www.ssleatherhandicraft.com&t=xo&v=5.0.338&source=payments_sdk&client_id=AVglMdi0_2DXK7luZsUdRMf6RFw4Nck1uVz8DPFoEqILdCR8sEuwsAmUNqt_R7BEKF2i7_tEFEPrR9Y-&comp=buttons,funding-eligibility&vault=true HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-E4uc+nxQSzNhQYDMYpqFZJCzh+G6vIfpaTVKe6w0mYkKwkWg' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f7914804ef586
traceparent: 00-0000000000000000000f7914804ef586-80d2e0ccf5da31e5-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 06 Nov 2022 23:07:04 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11576-HHN, cache-bma1677-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1667776024.185591,VS0,VE791
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f7914804ef586-5e11d098427c7621-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2
|
|
| www.paypal.com/xoplatform/logger/api/logger | 151.101.129.21 | 200 OK | 689 B |
URL HTTP/2www.paypal.com/xoplatform/logger/api/logger IP151.101.129.21:0
File typeJSON data\012- , ASCII text, with very long lines (1016), with no line terminators Hash6a87f95db58ecc550a89d9a7a2d37329 ab8ffbe59deba370e0cdba96496d898fc0d5fbf3 2b831ca492a894cf216a6ba999b28cac3cadb121045f26198b68ed750b727324
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1532
Origin: https://www.ssleatherhandicraft.com
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.ssleatherhandicraft.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
etag: W/W/"3f8-EnVVMl4wXWhqRK3MM9cz4K3xEyo"
paypal-debug-id: f968842af4ee6
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 06 Nov 2023 23:07:04 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 07 Nov 2022 07:53:00 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 09 Nov 2022 23:07:03 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY2Nzc3NjAyNDY0MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Sun, 06 Nov 2022 23:37:04 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1762470424%26vteXpYrS%3D1667777824%26vr%3D4f3290191840a1f1acc4a2a3fefa3f63%26vt%3D4f3290191840a1f1acc4a2a3fefa3f62%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 05 Nov 2025 23:07:04 GMT; HttpOnly; Secure
ts_c=vr%3D4f3290191840a1f1acc4a2a3fefa3f63%26vt%3D4f3290191840a1f1acc4a2a3fefa3f62; Path=/; Domain=paypal.com; Expires=Wed, 05 Nov 2025 23:07:04 GMT; Secure
traceparent: 00-0000000000000000000f968842af4ee6-f89022bd9e8fabd6-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Sun, 06 Nov 2022 23:07:04 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11533-HHN, cache-bma1677-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1667776025.504069,VS0,VE232
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13dd0fa0-60cd-4a93-b673-6d1c4b963e3c.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13dd0fa0-60cd-4a93-b673-6d1c4b963e3c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash98ba06818a9e583ae9d633917ad1b311 3bbbfcb3e35f1827a7a5a0da29f9042262b706dc c6fa191b753430aa1ae982c36cdb9bb43af17258513f6a51db8a17c7d8cc4f9f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13dd0fa0-60cd-4a93-b673-6d1c4b963e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9698
x-amzn-requestid: abd3018e-ef1b-4bea-96c3-f2acfe09e5f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtgiFEwIAMFYYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63682936-4f3d5f8420cf69054c250ea8;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:37:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dAJc78sGe0SRE5jXuMH4xDEkSkJfbkcq0RycQ0aKDSCl-p0x7QY2nA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:51:02 GMT
age: 4565
etag: "3bbbfcb3e35f1827a7a5a0da29f9042262b706dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.8.0 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.8.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.8.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:29:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 20:37:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-includes/css/dashicons.min.css?ver=6.0.3 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-includes/css/dashicons.min.css?ver=6.0.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/css/dashicons.min.css?ver=6.0.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Mar 2021 02:46:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/uploads/LOGO.png | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/uploads/LOGO.png IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/LOGO.png HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 Oct 2022 02:23:35 GMT
accept-ranges: bytes
content-length: 314256
content-type: image/png
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.paypal.com/xoplatform/logger/api/logger | 151.101.129.21 | 200 OK | 0 B |
URL HTTP/2www.paypal.com/xoplatform/logger/api/logger IP151.101.129.21:0
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.ssleatherhandicraft.com/
Origin: https://www.ssleatherhandicraft.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.ssleatherhandicraft.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f1803141254b0
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 07 Nov 2022 07:53:00 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 06 Nov 2023 23:07:04 GMT; Secure
x-pp-s=eyJ0IjoiMTY2Nzc3NjAyNDM3MCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 09 Nov 2022 23:07:04 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Sun, 06 Nov 2022 23:37:04 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1762470424%26vteXpYrS%3D1667777824%26vr%3D4f328f061840ad04b7be04f4fdcbf4bf%26vt%3D4f328f061840ad04b7be04f4fdcbf4be%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 05 Nov 2025 23:07:04 GMT; HttpOnly; Secure
ts_c=vr%3D4f328f061840ad04b7be04f4fdcbf4bf%26vt%3D4f328f061840ad04b7be04f4fdcbf4be; Path=/; Domain=paypal.com; Expires=Wed, 05 Nov 2025 23:07:04 GMT; Secure
traceparent: 00-0000000000000000000f1803141254b0-a3b4312088474808-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sun, 06 Nov 2022 23:07:04 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11521-HHN, cache-bma1677-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1667776024.239376,VS0,VE249
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.5.2 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.5.2 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.5.2 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 11:29:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/style.css?ver=6.0.3 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/css/style.css?ver=6.0.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/css/style.css?ver=6.0.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/functions.js?ver=6.0.3 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/functions.js?ver=6.0.3 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/functions.js?ver=6.0.3 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:29:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/bootstrap.min.js?ver=4.0.0 | 162.215.254.72 | 200 OK | 0 B |
URL HTTP/2www.ssleatherhandicraft.com/wp-content/themes/kapee/assets/js/bootstrap.min.js?ver=4.0.0 IP162.215.254.72:0 ASN#394695 PUBLIC-DOMAIN-REGISTRY
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/kapee/assets/js/bootstrap.min.js?ver=4.0.0 HTTP/1.1
Host: www.ssleatherhandicraft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ssleatherhandicraft.com/sl/csisniibialfitdla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Jan 2022 18:28:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sun, 06 Nov 2022 23:07:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
0.0.0.0