| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8286265a56e3e10efd41b41618a54071 5f10ac9a050e15f5598674dc7ee3865b325d01a8 2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2934
Expires: Sun, 06 Nov 2022 02:48:35 GMT
Date: Sun, 06 Nov 2022 01:59:41 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash72c64df35304c35cd95e4ed6e101e795 a39287987854d644a8da295da536fb31de8b44c1 a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1954
Cache-Control: max-age=115437
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:41 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 10:03:38 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash72c64df35304c35cd95e4ed6e101e795 a39287987854d644a8da295da536fb31de8b44c1 a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1954
Cache-Control: max-age=115437
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:41 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 10:03:38 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash078950c3ba9ad01927f3da494b1d1de4 443c8a8247e4e3e04c14d21e0227fc4e8f396142 dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2870
Expires: Sun, 06 Nov 2022 02:47:31 GMT
Date: Sun, 06 Nov 2022 01:59:41 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kPR/aCwqOEHXpfuk8zlWZj1ZbwpjWvKC9oZTmcNwZK1EPXFeV/EKPToXPq99fiUUDTm4bGgJvQc=
x-amz-request-id: CDHBB164JJF0XKFH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 01:47:26 GMT
age: 735
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.qulfiwala.com/966833827.doc |  141.94.75.208 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www.qulfiwala.com/966833827.doc IP141.94.75.208:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /966833827.doc HTTP/1.1
Host: www.qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 06 Nov 2022 01:59:42 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/7.4.33
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Nitro-Cache: MISS
X-Nitro-Disabled: 1
X-Nitro-Disabled-Reason: 404
X-Redirect-By: WordPress
Set-Cookie: PHPSESSID=df0a2f4fd3976d81cbec07ac9ffc1c29; path=/
Location: https://www.qulfiwala.com/966833827.doc
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashdb63d54b77502dd6c7bdc792d4fd093e 026ad8186833988279468829c004c6e2a2f2626f eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6421
Cache-Control: max-age=114846
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:42 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 09:53:48 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.38.146.2 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.38.146.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QbcKB9LYJl2G5qTyXVGJ5A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: b8rb3cy15fE8KeIM6h9NoB3+HX8=
|
|
| www.qulfiwala.com/966833827.doc | 141.94.75.208 | 301 Moved Permanently | 0 B |
URL HTTP/2www.qulfiwala.com/966833827.doc IP141.94.75.208:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /966833827.doc HTTP/1.1
Host: www.qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 06 Nov 2022 01:59:43 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://qulfiwala.com/966833827.doc
x-powered-by: PHP/7.4.33
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-nitro-cache: MISS
x-nitro-disabled: 1
x-nitro-disabled-reason: 404
x-redirect-by: WordPress
set-cookie: PHPSESSID=76b924639025f9e8d536708f13d66066; path=/
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf6ae0db60213bfddbf2ad71a9fb116bf 915d2895adc3f022c28cc628aeb6e441cbb09d47 ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3711
Expires: Sun, 06 Nov 2022 03:01:35 GMT
Date: Sun, 06 Nov 2022 01:59:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf6ae0db60213bfddbf2ad71a9fb116bf 915d2895adc3f022c28cc628aeb6e441cbb09d47 ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3711
Expires: Sun, 06 Nov 2022 03:01:35 GMT
Date: Sun, 06 Nov 2022 01:59:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf6ae0db60213bfddbf2ad71a9fb116bf 915d2895adc3f022c28cc628aeb6e441cbb09d47 ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3711
Expires: Sun, 06 Nov 2022 03:01:35 GMT
Date: Sun, 06 Nov 2022 01:59:44 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F890e08dd-f031-40a0-bb61-21e29cfa6440.jpeg | 34.120.237.76 | 200 OK | 3.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F890e08dd-f031-40a0-bb61-21e29cfa6440.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashce864f21ddf25bc378c9ac25f38b297d 2f47f7814c81966de4f5d20d72d4f8dc861d497a e3a1a6681749778ba051bbf07ffee850dd8eeb4621a5b7d2d01747d14d05c732
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F890e08dd-f031-40a0-bb61-21e29cfa6440.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3055
x-amzn-requestid: 8bbb49c4-6658-4901-854c-db0584cca2ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIaqEjeIAMFTQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364baaa-744b04700c10145658db4da0;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:09:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Tzp3hSXpfNH2bavdtHP8wPci7O4nQxIMOO_XKTKp9TtWeYhLNDNNzg==
via: 1.1 41a1988bf0eebd2eb412a5ab1f1f394e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 07:49:39 GMT
age: 65405
etag: "2f47f7814c81966de4f5d20d72d4f8dc861d497a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb370c4e3b01be9fbbc3e310e6958cd55 cc22e90a0b476215f2fd864d84c9b00dded100a6 f54d90c5854b6f140b63dad3aa92bd858b8f360b8c77d50fdf344e813e9385c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11535
x-amzn-requestid: 0a1d9895-e2e3-4070-921a-736d8c6f254e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJatPGwjoAMFx8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7ee-101a7f3a2b834d0b411c9de0;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gjEERXiPH4yDHtW87u7qRDYz1A2DKKlkYXKVC3F9VshnRvhh2wSaSQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:08:57 GMT
age: 13847
etag: "cc22e90a0b476215f2fd864d84c9b00dded100a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a74005-0af0-4302-9353-9297abcf7976.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a74005-0af0-4302-9353-9297abcf7976.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0f175e783e99f623f898eb07578ed28a c090b3db88d3c2381e7d14d2aab5078fd50be14a 6eaf64d99a8626df553aeeb24a5ee1a69e3d6c32293385dedd6c83dd231c84e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a74005-0af0-4302-9353-9297abcf7976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8157
x-amzn-requestid: 744eb347-ec2d-415a-9ef8-b568cbab87b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJbdFGPpIAMFVNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d920-1cdfca51044ee94a39c4eb08;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:44:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Cp3_ZmdPkEe2J2UFpy3ekhbSMOhRPgqwUxiY3uH13cZIQUKb7HyE8g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:00:56 GMT
etag: "c090b3db88d3c2381e7d14d2aab5078fd50be14a"
content-type: image/jpeg
age: 14328
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash83c047f46d089a4bf3f8fc3268bd8d02 0c7e46d28854bc512252ada34ed2e347a18e5479 87578f25647d4b785b935806658aaafbc0df4b11d8720924326c2734581a40c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6907
x-amzn-requestid: d9cc225c-f74e-431a-aad8-082b8ed86d46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabjFazIAMFYUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-1dd9396566c54c9e19e777e6;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lG55AkOPLHq9S9MZyRA2V4DlgTNYl9OzJdfLdWVw9Uu2VZ4OzJLaSg==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 15324
etag: "0c7e46d28854bc512252ada34ed2e347a18e5479"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp | 34.120.237.76 | 200 OK | 9.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdcc79e66d1e21452efb26d26650f6739 1f727a7ea032082658944cf4041686446fb6b5f2 af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OR8zISm84Iz0FL3Km-aQOHSnjROX2-S_lKloAhMAThT17igEWRbxkA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 15324
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4e2853cc6ec6223160471401e6871f4b f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 09:11:34 GMT
age: 60490
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash127870c1eadd1fa609acb04ebed11e34 98d580b8c7351de08611a45f6892de8057ffd5b3 f7fe4ea03dfc858def028fa967810b9aa70f8cc6ea629715d80346f8603843a0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1690
Cache-Control: max-age=102586
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:44 GMT
Etag: "6365fc30-117"
Expires: Mon, 07 Nov 2022 06:29:30 GMT
Last-Modified: Sat, 05 Nov 2022 06:01:20 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
|
|
| qulfiwala.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 | 141.94.75.208 | 200 OK | 16 kB |
URL HTTP/2qulfiwala.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 IP141.94.75.208:0
Hasha85b6247972e4c7a87dc36094678c0a3 9544f361ef1e0f144d9e1b76d27d77291ab00a32 fa6b85cecb0e2c2893e8613ba7975a772f0ecf970271c6270277a722fb5b2d52
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Wed, 13 Jul 2022 08:50:38 GMT
etag: W/"62ce875e-15b64"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash6b72bfaacba486284aa2ecb4bcd8ebba 89fa4ef09e60380fc432c73b7919a29f26117088 fed14b27362ffe0dfbe0b1696e8dab5f6bba3e08b76bec620e75f0f3f213f69b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6Ler3EYaAAAAAJ4J_iHZfS8blYqLyYhvG8e8B740&ver=3.0 | 142.250.74.132 | 200 OK | 586 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6Ler3EYaAAAAAJ4J_iHZfS8blYqLyYhvG8e8B740&ver=3.0 IP142.250.74.132:0
File typeASCII text, with very long lines (884), with no line terminators Hashe9ee16788660a62d3e724053952ca740 37352966d07715f74758b96ce0e0c2434d777e9a eabf2c945fc68a6296eecdd77260d4970bb9a325471d756e278ccbb2d64fdc0f
GET /recaptcha/api.js?render=6Ler3EYaAAAAAJ4J_iHZfS8blYqLyYhvG8e8B740&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 06 Nov 2022 01:59:44 GMT
date: Sun, 06 Nov 2022 01:59:44 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash127870c1eadd1fa609acb04ebed11e34 98d580b8c7351de08611a45f6892de8057ffd5b3 f7fe4ea03dfc858def028fa967810b9aa70f8cc6ea629715d80346f8603843a0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1690
Cache-Control: max-age=102586
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:44 GMT
Etag: "6365fc30-117"
Expires: Mon, 07 Nov 2022 06:29:30 GMT
Last-Modified: Sat, 05 Nov 2022 06:01:20 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3ebbd65a2bdd5c6f3dea5a6b99b25f0d 484be27b25b736a7e7e2b1d5ef9760aecdcec01b 5616e6c097b0b7680eeee193b58950faa38c9792e8793c16c315e2554a34cdd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashd2b4c49a0fb79e3d3bc40d2a28b27120 3f53633851cf851451354ccfd2931f2ec7a9e40f a8a4ca2c09bae5cc3375077e531b357e2c1724693433a085ad038e3e6adfd96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/customizer-custom.css?ver=6.0.3 | 141.94.75.208 | 200 OK | 96 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/customizer-custom.css?ver=6.0.3 IP141.94.75.208:0
Hashf3cccfc46f6593872d723fb6aa4dff3b c99a8135f30395951f7a4515d0abb4afbbefeb6e 1bd83cefaa6f21803f416d8082fe7855dad74d21e2d340e6a2371608a427136e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/css/customizer-custom.css?ver=6.0.3 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
content-length: 96
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: "5fafe884-60"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash62a8ce6a2338913103618edb2f4a9dbe 0e0850b1aef6ed524d119a41145112b84c257687 51d11b07f58551b5864fb55d4560d8a2237c2351036de0af7e25c81816763b31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 01:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 | 142.250.74.99 | 200 OK | 20 kB |
URL HTTP/2fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 IP142.250.74.99:0
File typeWeb Open Font Format (Version 2), TrueType, length 19860, version 1.0\012- data Hasha95e391373ad634c3b7dbaf77de3f40e ddc4638bc28c21a400fcd2df94448743f198a257 fa3d5a0422c9b413abb4c78f8ff80de8a8ed58766f7110c82febf5296e899b47
GET /s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://qulfiwala.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 15:01:44 GMT
expires: Wed, 01 Nov 2023 15:01:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:06:33 GMT
content-type: font/woff2
age: 385081
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/uploads/2020/11/logo.png | 141.94.75.208 | 200 OK | 33 kB |
URL HTTP/2qulfiwala.com/wp-content/uploads/2020/11/logo.png IP141.94.75.208:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash30866df25f10b7d14d61e6f555031206 3e1b752f3c13ef2d89cc8e9b6ef56b5ee0f24383 877c566fb3101163faa5a3f763d0b53602d6b1fd4247d12875c326ba8c77ed9e
GET /wp-content/uploads/2020/11/logo.png HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: image/png
content-length: 33210
last-modified: Sat, 14 Nov 2020 14:23:43 GMT
etag: "5fafe86f-81ba"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.4.3 | 141.94.75.208 | 200 OK | 1.9 kB |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.4.3 IP141.94.75.208:0
Hash9619ecbcdbe4c09e938f54ed872f984b 54015f5c58d94ef3446af612fdf08e79bccb998b d60ea21433496102931ccdaa57207421f079760b7a8308bdcd5b8dc450d1f65c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.4.3 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:17:39 GMT
etag: W/"62a1f2f3-1345"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/gm-woocommerce-quote-popup/assents/img/close_btn.png | 141.94.75.208 | 200 OK | 37 kB |
URL HTTP/2qulfiwala.com/wp-content/plugins/gm-woocommerce-quote-popup/assents/img/close_btn.png IP141.94.75.208:0
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data Hash77f528a38ad5ceecb77632d0f75ec90c d9d0c4476fdb71d0c75e9c833b9b99e44947fd0c 6d56f790f768bbbb56d9fe87091debcdcaf33934e07eb83daeff9c2e631be4bc
GET /wp-content/plugins/gm-woocommerce-quote-popup/assents/img/close_btn.png HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: image/png
content-length: 37089
last-modified: Sat, 14 Nov 2020 14:23:33 GMT
etag: "5fafe865-90e1"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/js/bootstrap/transition.min.js?ver=3.3.7 | 141.94.75.208 | 200 OK | 752 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/js/bootstrap/transition.min.js?ver=3.3.7 IP141.94.75.208:0
File typeASCII text, with very long lines (752), with no line terminators Hashbcdddd9d03f5b2856f216dc44c7095a3 c8dd25b73d61cc6c90149cdfca0665e775590e42 f6524d3bc9f7ad5378a1957b540a60fe820e502ce1474bbb053d6b56e89a9102
GET /wp-content/themes/visual-composer-starter/js/bootstrap/transition.min.js?ver=3.3.7 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
content-length: 752
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: "5fafe884-2f0"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 | 141.94.75.208 | 200 OK | 999 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 IP141.94.75.208:0
File typeASCII text, with very long lines (999), with no line terminators Hash6a0e8318d42803736d2fafcc12238026 c955314a7e0a9a9871329b0f042c8f0b5df49a78 2648a1333fa24d383fd73a6beaac17156ae78f4267ff7407ad60e05a788df44c
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
content-length: 999
last-modified: Thu, 09 Jun 2022 13:16:32 GMT
etag: "62a1f2b0-3e7"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/images/arrow.png | 141.94.75.208 | 200 OK | 1.1 kB |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/images/arrow.png IP141.94.75.208:0
File typePNG image data, 32 x 15, 8-bit/color RGBA, non-interlaced\012- data Hash419cbdb199d1bb46a1455679764ba071 6eeea1e32a563813e9f786bc538dfc37f222a59f cd1f707a53c1136599ef5a399789a8a990b63e92d099f8f17256319f5e66ff3b
GET /wp-content/themes/visual-composer-starter/images/arrow.png HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; nitroCachedPage=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:45 GMT
content-type: image/png
content-length: 1052
last-modified: Sat, 14 Nov 2020 14:24:07 GMT
etag: "5fafe887-41c"
expires: Tue, 06 Dec 2022 01:59:45 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/fonts/visual-composer-starter-font.woff2 | 141.94.75.208 | 200 OK | 1.9 kB |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/fonts/visual-composer-starter-font.woff2 IP141.94.75.208:0
File typeWeb Open Font Format (Version 2), TrueType, length 1920, version 1.0\012- data Hashe49c4cd5d0d4b871ed98d400c945d16c db2c5e902f71aa7f2f2484b33f8b88ac16fc7d83 fda5b676fd883ba255aea36acf16d31fc1e27f19993d13c39864437328654cca
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/fonts/visual-composer-starter-font.woff2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://qulfiwala.com/wp-content/themes/visual-composer-starter/css/visual-composer-starter-font.min.css?ver=3.1.2
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; nitroCachedPage=0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:45 GMT
content-type: font/woff2
content-length: 1920
last-modified: Sat, 14 Nov 2020 14:24:05 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/966833827.doc | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/966833827.doc IP141.94.75.208:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
POST /966833827.doc HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qulfiwala.com/966833827.doc
Content-Type: multipart/form-data; boundary=---------------------------28030329915543358493174783045
Origin: https://qulfiwala.com
Content-Length: 182
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:45 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/7.4.33
cache-control: no-cache
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 | 141.94.75.208 | 200 OK | 1.5 kB |
URL HTTP/2qulfiwala.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 IP141.94.75.208:0
Hashf276d93e5c487f16b8b908261dc93aa4 dfc9c550050546ce09b0f0d7ace98250dc2a75dd 2fa249f4078db25977eaae4a6a906d19195f6d508971aa06aba154c0daa1f1c7
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:16:32 GMT
etag: W/"62a1f2b0-aab"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/gm-woocommerce-quote-popup//assents/css/style.css?ver=1.0.0 | 141.94.75.208 | 200 OK | 1.6 kB |
URL HTTP/2qulfiwala.com/wp-content/plugins/gm-woocommerce-quote-popup//assents/css/style.css?ver=1.0.0 IP141.94.75.208:0
Hasheb019e7288315e1e4cceb7a8b42c13a8 947aee694dbf61a1471893cad7ee12aa6ff691e0 ff6c48d2660e4fc5e52bf68622d9fccbbcfedae622e9eeb7e29ca0af9f597599
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/gm-woocommerce-quote-popup//assents/css/style.css?ver=1.0.0 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:23:33 GMT
etag: W/"5fafe865-f41"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| connect.facebook.net/en_US/fbevents.js |  31.13.72.12 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP31.13.72.12:0
File typeASCII text, with very long lines (64348) Hash0ac10debd3a9ea8147a26d045bb93e6e ff45f3442508e8695f2303701682ebdb6e016464 5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: C4XwZvxwqG0qZ+/4jBAglL9tjM2uvSYzfg6cSVcupHJsSuR/vnf1ZQxQcjPxxT3WX9x72+ZNHGj3On2bi/lvDQ==
priority: u=3,i
content-length: 27337
x-fb-trip-id: 1904183273
date: Sun, 06 Nov 2022 01:59:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js | 142.250.74.163 | 200 OK | 162 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (590) Size162 kB (162282 bytes) Hash05e06c50dab6f3d7f8bfde22301888db 64b3c20c788d298a672fabf9627eac914d95ed08 95176711feca1110e764a31e36764d5b331b033ed56fb372b42250329b33e1d6
GET /recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qulfiwala.com
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162282
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 14:45:31 GMT
expires: Sun, 05 Nov 2023 14:45:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 31 Oct 2022 04:02:45 GMT
content-type: text/javascript
age: 40454
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| connect.facebook.net/en_US/sdk/xfbml.customerchat.js | 31.13.72.12 | 200 OK | 92 kB |
URL HTTP/2connect.facebook.net/en_US/sdk/xfbml.customerchat.js IP31.13.72.12:0
File typeASCII text, with very long lines (20829) Hash8c8aa536166c5ab349b929bd8a6d42bc 7f348bf5ee12d1a3fe5dbb764de3a68524c18fc6 3f2dc82f1faa047fe24160b565e64114e6a29e4ef340d8243a8b448448d33bed
GET /en_US/sdk/xfbml.customerchat.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: fce37f44d4fc10ad53faf4b40c6677df
etag: "6b3fcaaff6541aef99ede1e73f5d972e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 06 Nov 2022 02:18:46 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: jIqlNhZsWrNJuSm9im1CvA==
x-fb-debug: bcPGaukPfWAo3z9cy5ABzubI6zkLa2vYcvaylznUAbGGJaJY5BKoDIJLdu570X9v4FDVUBYSZ4CKWMg7Jh5v+A==
content-length: 92382
x-fb-trip-id: 1904183273
date: Sun, 06 Nov 2022 01:59:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/uploads/2020/11/favicon.png | 141.94.75.208 | 200 OK | 10 kB |
URL HTTP/2qulfiwala.com/wp-content/uploads/2020/11/favicon.png IP141.94.75.208:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data Hashd9d95260716389c3e49874711188f3d9 e37fd3d4df677e9499b21157c583aff11bf2d85c 0395ff69b0c362cd93ae10addc8641ea2e82e83b6e64ef005a1fefaaf12c23cb
GET /wp-content/uploads/2020/11/favicon.png HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; nitroCachedPage=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:45 GMT
content-type: image/png
content-length: 10489
last-modified: Sat, 14 Nov 2020 14:23:50 GMT
etag: "5fafe876-28f9"
expires: Tue, 06 Dec 2022 01:59:45 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 12:31:58 GMT
expires: Sun, 05 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 48468
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.99:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:46:16 GMT
expires: Fri, 03 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 188010
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/?wc-ajax=get_refreshed_fragments | 141.94.75.208 | 200 OK | 279 B |
URL HTTP/2qulfiwala.com/?wc-ajax=get_refreshed_fragments IP141.94.75.208:0
File typeJSON data\012- , ASCII text, with very long lines (312), with no line terminators Hasha72cae39d7ee9cc7666addfc91524a91 c9230b6a0bacfaaee537952ab939359ac4784d2c a99ee71f5a3f21651a1c36694163d8f901056e610b3ae063ec355fa7c3f482f0
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://qulfiwala.com
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; nitroCachedPage=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:46 GMT
content-type: application/json; charset=UTF-8
x-powered-by: PHP/7.4.33
pragma: no-cache
x-nitro-cache: MISS
x-nitro-disabled: 1
x-nitro-disabled-reason: ajax
access-control-allow-origin: https://qulfiwala.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=268705764635772&ev=PageView&dl=https%3A%2F%2Fqulfiwala.com%2F966833827.doc&rl=&if=false&ts=1667699984668&sw=1280&sh=1024&v=2.9.89&r=stable&a=wordpress-6.0.3-3.0.6&ec=0&o=30&fbp=fb.1.1667699984667.1927049248&it=1667699984317&coo=false&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=268705764635772&ev=PageView&dl=https%3A%2F%2Fqulfiwala.com%2F966833827.doc&rl=&if=false&ts=1667699984668&sw=1280&sh=1024&v=2.9.89&r=stable&a=wordpress-6.0.3-3.0.6&ec=0&o=30&fbp=fb.1.1667699984667.1927049248&it=1667699984317&coo=false&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=268705764635772&ev=PageView&dl=https%3A%2F%2Fqulfiwala.com%2F966833827.doc&rl=&if=false&ts=1667699984668&sw=1280&sh=1024&v=2.9.89&r=stable&a=wordpress-6.0.3-3.0.6&ec=0&o=30&fbp=fb.1.1667699984667.1927049248&it=1667699984317&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 06 Nov 2022 01:59:46 GMT
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.4.3 | 141.94.75.208 | 200 OK | 118 kB |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.4.3 IP141.94.75.208:0
Size118 kB (118319 bytes) Hashb8b8a7ef35d088ff51a4fb92a145c803 1c0ace1127aec7a967859c2d81303efce2c225db a79e8b4787d812a7aab52cf5f366db2db034399b9e1e87c4c9d183679b236ca5
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.4.3 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:17:40 GMT
etag: W/"62a1f2f4-33162"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.5.1 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:17:43 GMT
etag: W/"62a1f2f7-bdd"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.5.1 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:17:43 GMT
etag: W/"62a1f2f7-4591"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.5.1 IP141.94.75.208:0
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:17:44 GMT
etag: W/"62a1f2f8-f523"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/woocommerce.min.css?ver=3.1.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/woocommerce.min.css?ver=3.1.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/css/woocommerce.min.css?ver=3.1.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-bba4"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:12:48 GMT
etag: W/"62a1f1d0-15db1"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| socialplugin.facebook.net/new_domain_gating/?endpoint=customerchat&page_id=221603551770219&suppress_http_code=1 | 31.13.72.8 | 200 OK | 0 B |
URL HTTP/2socialplugin.facebook.net/new_domain_gating/?endpoint=customerchat&page_id=221603551770219&suppress_http_code=1 IP31.13.72.8:0
GET /new_domain_gating/?endpoint=customerchat&page_id=221603551770219&suppress_http_code=1 HTTP/1.1
Host: socialplugin.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://qulfiwala.com
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/json; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
access-control-allow-origin: https://qulfiwala.com
x-fb-debug: vpKui2Z60GXSYqGMFICXjBK2gTN74kf5pViZItsgnP2eL6Oh3AqAOYXbfLm5lixwHYeVWrXUUAY9oT9v5nvSjA==
date: Sun, 06 Nov 2022 01:59:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.5.1 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:17:43 GMT
etag: W/"62a1f2f7-85b"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/js/slick/slick.min.js?ver=1.6.0 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/js/slick/slick.min.js?ver=1.6.0 IP141.94.75.208:0
GET /wp-content/themes/visual-composer-starter/js/slick/slick.min.js?ver=1.6.0 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-a3e1"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.5.1 IP141.94.75.208:0
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:45 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:17:44 GMT
etag: W/"62a1f2f8-1b83"
expires: Tue, 06 Dec 2022 01:59:45 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-json/contact-form-7/v1/contact-forms/39/refill | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-json/contact-form-7/v1/contact-forms/39/refill IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-json/contact-form-7/v1/contact-forms/39/refill HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qulfiwala.com/966833827.doc
Connection: keep-alive
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; nitroCachedPage=0; _fbp=fb.1.1667699984667.1927049248
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:47 GMT
content-type: application/json; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-robots-tag: noindex
link: <https://qulfiwala.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/visual-composer-starter-font.min.css?ver=3.1.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/visual-composer-starter-font.min.css?ver=3.1.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/css/visual-composer-starter-font.min.css?ver=3.1.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-78c"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:12:47 GMT
etag: W/"62a1f1cf-2bd8"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP141.94.75.208:0
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:12:47 GMT
etag: W/"62a1f1cf-4ac6"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 IP141.94.75.208:0
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:16:32 GMT
etag: W/"62a1f2b0-25f8"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/js/theme-fun.js | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/js/theme-fun.js IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/js/theme-fun.js HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Mon, 01 Feb 2021 12:44:48 GMT
etag: W/"6017f7c0-166a"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=The+Girl+Next+Door%3Aregular|Playfair+Display%3Aregular%2Citalic%26subset%3Dcyrillic%2Ccyrillic-ext%2Cdevanagari%2Cgreek%2Cgreek-ext%2Ckhmer%2Clatin%2Clatin-ext%2Cvietnamese | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=The+Girl+Next+Door%3Aregular|Playfair+Display%3Aregular%2Citalic%26subset%3Dcyrillic%2Ccyrillic-ext%2Cdevanagari%2Cgreek%2Cgreek-ext%2Ckhmer%2Clatin%2Clatin-ext%2Cvietnamese IP142.250.74.10:0
GET /css?family=The+Girl+Next+Door%3Aregular|Playfair+Display%3Aregular%2Citalic%26subset%3Dcyrillic%2Ccyrillic-ext%2Cdevanagari%2Cgreek%2Cgreek-ext%2Ckhmer%2Clatin%2Clatin-ext%2Cvietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 06 Nov 2022 01:59:44 GMT
date: Sun, 06 Nov 2022 01:59:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woo-quote-or-enquiry-contact-form-7/assets/css/wqoecf-front-style.css?ver=2.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woo-quote-or-enquiry-contact-form-7/assets/css/wqoecf-front-style.css?ver=2.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woo-quote-or-enquiry-contact-form-7/assets/css/wqoecf-front-style.css?ver=2.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 13:17:52 GMT
etag: W/"62a1f300-106a"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:12:47 GMT
etag: W/"62a1f1cf-194b"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/js/functions.min.js?ver=3.1.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/js/functions.min.js?ver=3.1.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/js/functions.min.js?ver=3.1.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-118a"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/gm-woocommerce-quote-popup//assents/js/script.js?ver=1.0.0 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/gm-woocommerce-quote-popup//assents/js/script.js?ver=1.0.0 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/gm-woocommerce-quote-popup//assents/js/script.js?ver=1.0.0 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Sat, 14 Nov 2020 14:23:33 GMT
etag: W/"5fafe865-b18"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:12:44 GMT
etag: W/"62a1f1cc-48b9"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/style.min.css?ver=3.1.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/style.min.css?ver=3.1.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/css/style.min.css?ver=3.1.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-6fed"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woo-quote-or-enquiry-contact-form-7/assets/js/wqoecf-front-script.js?ver=2.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woo-quote-or-enquiry-contact-form-7/assets/js/wqoecf-front-script.js?ver=2.2 IP141.94.75.208:0
GET /wp-content/plugins/woo-quote-or-enquiry-contact-form-7/assets/js/wqoecf-front-script.js?ver=2.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:17:52 GMT
etag: W/"62a1f300-4ca"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.5.1 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:17:43 GMT
etag: W/"62a1f2f7-b7a"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/responsive.min.css?ver=3.1.2 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/responsive.min.css?ver=3.1.2 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/css/responsive.min.css?ver=3.1.2 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-126e"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.5.1 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:17:43 GMT
etag: W/"62a1f2f7-253d"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/js/bootstrap/collapse.min.js?ver=3.3.7 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/js/bootstrap/collapse.min.js?ver=3.3.7 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/js/bootstrap/collapse.min.js?ver=3.3.7 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-d28"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/js/theme-lib.js | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/js/theme-lib.js IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/js/theme-lib.js HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 19 Nov 2020 10:14:16 GMT
etag: W/"5fb64578-41255"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/966833827.doc | 141.94.75.208 | 404 Not Found | 0 B |
URL HTTP/2qulfiwala.com/966833827.doc IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /966833827.doc HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-nitro-cache: MISS
x-nitro-disabled: 1
x-nitro-disabled-reason: 404
link: <https://qulfiwala.com/wp-json/>; rel="https://api.w.org/"
set-cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css |  104.18.11.207 | 200 OK | 0 B |
URL HTTP/2stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.11.207:0
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qulfiwala.com
Connection: keep-alive
Referer: https://qulfiwala.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 08/20/2022 02:30:56
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7fa220820e4d88672747b54f1e23e9de
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 765a3b46c915b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/slick.min.css?ver=1.6.0 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/slick.min.css?ver=1.6.0 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/visual-composer-starter/css/slick.min.css?ver=1.6.0 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-4d0"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/css/bootstrap.min.css?ver=3.3.7 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/css/bootstrap.min.css?ver=3.3.7 IP141.94.75.208:0
GET /wp-content/themes/visual-composer-starter/css/bootstrap.min.css?ver=3.3.7 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Sat, 14 Nov 2020 14:24:04 GMT
etag: W/"5fafe884-1d2e2"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/themes/visual-composer-starter/style.css?ver=6.0.3 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/themes/visual-composer-starter/style.css?ver=6.0.3 IP141.94.75.208:0
GET /wp-content/themes/visual-composer-starter/style.css?ver=6.0.3 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 12:15:48 GMT
etag: W/"62a1e474-2fd79"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.5.1 | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.5.1 IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.5.1 HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://qulfiwala.com/966833827.doc
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:44 GMT
content-type: application/javascript
last-modified: Thu, 09 Jun 2022 13:17:43 GMT
etag: W/"62a1f2f7-72a"
expires: Tue, 06 Dec 2022 01:59:44 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| qulfiwala.com/wp-json/contact-form-7/v1/contact-forms/217/refill | 141.94.75.208 | 200 OK | 0 B |
URL HTTP/2qulfiwala.com/wp-json/contact-form-7/v1/contact-forms/217/refill IP141.94.75.208:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-json/contact-form-7/v1/contact-forms/217/refill HTTP/1.1
Host: qulfiwala.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qulfiwala.com/966833827.doc
Connection: keep-alive
Cookie: PHPSESSID=3735dfecd37031e45c2ea08b8fc9142a; nitroCachedPage=0; _fbp=fb.1.1667699984667.1927049248
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 01:59:47 GMT
content-type: application/json; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-robots-tag: noindex
link: <https://qulfiwala.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|