| www.blazingvisuals.com/ |  104.196.154.66 | 301 Moved Permanently | 162 B |
IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 02 Feb 2023 17:40:21 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=20
Location: https://www.blazingvisuals.com/
|
|
| www.blazingvisuals.com/ | 104.196.154.66 | 301 Moved Permanently | 0 B |
IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 02 Feb 2023 17:40:21 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://blazingvisuals.com/
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
x-pingback: https://blazingvisuals.com/xmlrpc.php
x-redirect-by: WordPress
x-powered-by: WP Engine
x-cacheable: non200
cache-control: max-age=600, must-revalidate
x-cache: HIT: 2
x-cache-group: normal
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 17:36:06 GMT
content-type: application/json
age: 256
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 24k91+FHIOPCwwMEDhJTcMU/wa3Teazl7nUR+64bsp0k4TBI46wo1CQqaXTkrqe7tFA8RmBunD/9YvLbI+WxcQ==
x-amz-request-id: QEGJBYCAG2F6WN0Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 17:23:12 GMT
age: 1030
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash4cf0ccf2909be74efd7a89dbe4228ffb b4993da334b48312584d116a3de4be4cd71962cf e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 16:49:05 GMT
age: 3077
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LddA_EUAAAAAMtMFpNIz67ncBfi0hXrALvbNKYf&ver=3.0 | 142.250.74.164 | 200 OK | 587 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LddA_EUAAAAAMtMFpNIz67ncBfi0hXrALvbNKYf&ver=3.0 IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hash1ad0b430cd8177a3489255b2d8cb027a 3aba54da4c774eae44c9f95c393ff4f5d7dc80b5 63a62978e909a9c5fa470bc8900be08c21642b55f285d3f27ee1de7f24a9899b
GET /recaptcha/api.js?render=6LddA_EUAAAAAMtMFpNIz67ncBfi0hXrALvbNKYf&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 02 Feb 2023 17:40:22 GMT
date: Thu, 02 Feb 2023 17:40:22 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 587
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby_child/css/main.min.css?ver=1481026985 | 104.196.154.66 | 200 OK | 15 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby_child/css/main.min.css?ver=1481026985 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with no line terminators Hash6700e3e577966de91432a219303a54ce a9d94d6a080456e356a8a78c6e40a09aef1a15f2 15c42ab7768d955ec0667195e339104557827893b16cc3e7412c76e7c2fcd371
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby_child/css/main.min.css?ver=1481026985 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
content-length: 15
last-modified: Tue, 06 Dec 2016 12:23:05 GMT
etag: "5846ada9-f"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashd06fd066caf4dfa1e21a722a5c468158 acb765577662906ae8e11242bed487ce1051db28 4b45760de269e60345d43ff2da6c5803722f7c052edd0a9f5258ce69b2ffa32f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 35.162.110.205 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.162.110.205:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GuwoWe7n32qpYRillhYhtQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: In8DeNJSfHM0L0pBiv8zq3q0Iow=
|
|
| blazingvisuals.com/wp-content/uploads/2016/04/blazing-logo-225x52.png | 104.196.154.66 | 200 OK | 5.7 kB |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2016/04/blazing-logo-225x52.png IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typePNG image data, 225 x 52, 8-bit/color RGBA, non-interlaced\012- data Hash74aae9456663ca7f39186aacc288845f 2750ee233d4d9a1bbc84f7a6a52dfdd0a1ef0b02 3021812e051fd047f8e74f5a91e935453f43ecc5234adeb469edb9f67dfe3630
GET /wp-content/uploads/2016/04/blazing-logo-225x52.png HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: image/png
content-length: 5730
last-modified: Tue, 06 Dec 2016 12:24:35 GMT
etag: "5846ae03-1662"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/admin/assets/images/dummy.png | 104.196.154.66 | 200 OK | 73 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/admin/assets/images/dummy.png IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Hash9d08eac154f5b02ef14e612fc25b9bf2 5a1e9121811015fbc274dae72072f874aee3d805 17af9e65317bbbfbbd0bcdc729f14faadf37cd08cf30cc0fe0b72443e78cbffb
GET /wp-content/plugins/revslider/admin/assets/images/dummy.png HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: image/png
content-length: 73
last-modified: Sat, 18 Nov 2017 14:30:56 GMT
etag: "5a104420-49"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2016/08/Thumbnail-Image-450x450.jpg | 104.196.154.66 | 200 OK | 49 kB |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2016/08/Thumbnail-Image-450x450.jpg IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 450x450, components 3\012- data Hashaad2a2131ce4c360ffed79d0273bafd4 f2f51a67f930a918919925b59dddaac26e9423ab fb64043f1802071487a87be0cc8524d954aaca407897fb37ee0862acb5702272
GET /wp-content/uploads/2016/08/Thumbnail-Image-450x450.jpg HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: image/jpeg
content-length: 49194
last-modified: Tue, 17 Jan 2017 21:35:28 GMT
etag: "587e8e20-c02a"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2016/08/Thumbnail-Image-2-scaled-450x338.jpg | 104.196.154.66 | 200 OK | 33 kB |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2016/08/Thumbnail-Image-2-scaled-450x338.jpg IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x338, components 3\012- data Hash1aeb5521102371589998fc360e54b9b4 0ce852b26a0f7376be3e509f9acaddee34bdce34 2549649ac8c684bdb128a9938196f7924c4ad614547dcee0482f1a510f7d6c43
GET /wp-content/uploads/2016/08/Thumbnail-Image-2-scaled-450x338.jpg HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: image/jpeg
content-length: 32618
last-modified: Fri, 19 Feb 2021 17:38:03 GMT
etag: "602ff77b-7f6a"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2016/08/Thumbnail_image-450x334.jpg | 104.196.154.66 | 200 OK | 30 kB |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2016/08/Thumbnail_image-450x334.jpg IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 450x334, components 3\012- data Hash6ea6cfb830599c47b7ada0d4b2d02eb2 f01319aa62d7b08691c1011ad53438e31b1f6118 a9f636f1abf60546b8cbe5a66b17a2532f33fcc59f6c2d91d2abfc99abe9d79e
GET /wp-content/uploads/2016/08/Thumbnail_image-450x334.jpg HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: image/jpeg
content-length: 29501
last-modified: Tue, 17 Jan 2017 21:35:29 GMT
etag: "587e8e21-733d"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2016/04/blazing-logo.png | 104.196.154.66 | 200 OK | 102 kB |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2016/04/blazing-logo.png IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typePNG image data, 4542 x 1052, 8-bit/color RGBA, non-interlaced\012- data Size102 kB (102422 bytes) Hash4efb3f9da1140dcb9af6b29ae55b74e8 b30799ab87ca287eceb3c85b5fdc78f55e9b0c23 3676520bdfb6b63f1938b32883f50442bee8bba0f48a02a272343a5f0d0c2c11
GET /wp-content/uploads/2016/04/blazing-logo.png HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: image/png
content-length: 102422
last-modified: Tue, 06 Dec 2016 12:24:35 GMT
etag: "5846ae03-19016"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/fonts/soc-icons.woff | 104.196.154.66 | 200 OK | 35 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/fonts/soc-icons.woff IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeWeb Open Font Format, CFF, length 35228, version 1.0\012- data Hash97c2eb3607a77abcd687a1d1cca84989 273b8971197cf0e03b6169fc771efa2cb60fb528 21ac17720285646169355f26dc7e527c20d2882a8d1de2a902e429dc94f9acd5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/fonts/soc-icons.woff HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://blazingvisuals.com/wp-content/themes/ronneby/assets/css/app.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:23 GMT
content-type: font/woff
content-length: 35228
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: "5846aea0-899c"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/fonts/dfd-added-font-icon.ttf?uwi5vc | 104.196.154.66 | 200 OK | 14 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/fonts/dfd-added-font-icon.ttf?uwi5vc IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, dfd-added-font-icon\012- data Hashd4e4725bb248f858374ec8572b6bd326 6f830ab627051b02e8277af0fe98b859c39fce78 3225dc06dda4717cca73b8118f028881019a7ba76773b5f6e48c1f8aaf96af50
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/fonts/dfd-added-font-icon.ttf?uwi5vc HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/wp-content/themes/ronneby/assets/css/app.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:23 GMT
content-type: application/octet-stream
content-length: 14320
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: "5846aea0-37f0"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 | 104.196.154.66 | 200 OK | 11 kB |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (28818), with CRLF line terminators Hash002b1f51c9e84f278407384cb97b77cc 47fa873225d072afbf21a15eb7cc565cd648fb84 ed5f864389f1af7496699dcdef4ecc4fbfe65a6707cfa994eae426078317cee9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:24 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 18 Jun 2018 10:33:44 GMT
etag: W/"5b278a88-718e"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.sharrre-1.3.5.min.js | 104.196.154.66 | 200 OK | 13 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.sharrre-1.3.5.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeHTML document, Unicode text, UTF-8 text, with very long lines (13957), with no line terminators Hashdfaaf5bc2c76598f674a0b2f6f8fce4e 5e93becbb2f7561a08fe7b6ac35bd539ba6adb8c c26b0d9d9b13b18b8fab8acd0c87a68fc3436dd42d47a134cc5b0919d8663d97
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.sharrre-1.3.5.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-3687"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/vertical.min.js | 104.196.154.66 | 200 OK | 6.2 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/vertical.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (2857), with no line terminators Hashab8ffc1f4b11c6b0443cd8d11d4e43ff d81b82a80e0a07ebcb8ec61111c8178777dee8e6 36bf028cd9e4e7424e23f3c4851f1f45fa0b7934818fccc8d3f660cae1a38ab7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/vertical.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-b29"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.dropkick-min.js | 104.196.154.66 | 200 OK | 16 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.dropkick-min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (12632) Hash22e2fc68213bbf47001066ba8847c0c6 b7c28b3d859ea0696871354c194341f695440958 62e8447ce179d84ff6376b23f5fe38bd20356253a4a1f55f871fd0eaba66d0fe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.dropkick-min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-4e29"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.keyframes.min.js | 104.196.154.66 | 200 OK | 13 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.keyframes.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeHTML document, ASCII text, with very long lines (4369), with no line terminators Hashcc75364609daa753476ea35571daa85c e47c97f25af0de69134c5ff1c96dc5fe4e334422 93036fc9ab4b1d057b00ee0ceddccd294696629354fbdb4f1773f02a33482bb0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.keyframes.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-1111"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.migrate.min.js | 104.196.154.66 | 200 OK | 7.8 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.migrate.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (7469), with no line terminators Hashc7142fd8a97159fe7ac41873298734c8 0e68ca96dd8fd4c122d300100612679ad3597dc9 736cc7f76f510988d1d4171758e3d38c39c9c2f9f8118c8ce9367560f476be0a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.migrate.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-1d2d"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.slick.min.js | 104.196.154.66 | 200 OK | 26 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.slick.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (32012) Hashf7ebd2050ca0449e3bb9b0024d707734 e517302be1739bc55f2ecf64583d42fdd0493d4e bc7a0c927f38d6b94b0249f12dd963f15f6e1cb2182b02e71d80a2c3f05b529d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.slick.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-9f72"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.mega-menu.run.min.js | 104.196.154.66 | 200 OK | 39 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.mega-menu.run.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (3174), with no line terminators Hash67831f8da4a9eb12c3af0d126a872c12 5086dea1cc1cac19adc67f4c7a0b261452c16ef0 f0751c49902a32575436d0cd2adfec2c90adb12a9fcfea7260d98c642d94d083
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.mega-menu.run.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-c66"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.14 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.14:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 02 Feb 2023 15:45:20 GMT
expires: Thu, 02 Feb 2023 17:45:20 GMT
cache-control: public, max-age=7200
age: 6904
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8 | 104.196.154.66 | 200 OK | 7.6 kB |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (25862), with CRLF line terminators Hash62e894f6e0918efd3db05d93582977c1 15847e288fa08d5768ada7eefa7f40db4f3cf464 e5f7510bb90dbe7bdbccd3a7eb073ed01f81c36edbee7f8be201c250ded0e911
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:24 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 18 Jun 2018 10:33:36 GMT
etag: W/"5b278a80-65f7"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/webfont/1.5.3/webfont.js | 142.250.74.170 | 200 OK | 17 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/webfont/1.5.3/webfont.js IP142.250.74.170:0
File typeASCII text, with very long lines (1322) Hashb1214132e520a7e9bd89af99237c5f24 45b3a11f70e46248a30471795ab43861e98b48e7 36ef095d011c4ced97b0acef551ca36d76b95299518595dc1acab792a2344601
GET /ajax/libs/webfont/1.5.3/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 17380
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 10:20:25 GMT
expires: Sun, 28 Jan 2024 10:20:25 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 458399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 104.196.154.66 | 200 OK | 13 kB |
URL HTTP/2blazingvisuals.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (47826) Hashf2e1460bfae6470de2a19cc66c02ca03 1ba6dc891d2e53e6cc23e7eb5c59b98a76c2a2f5 4bed36cb6cb57d7effd66111fb8b619a813daa01b715dd6e05cc9bc59ef68c28
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 11 Nov 2022 14:56:45 GMT
etag: W/"636e62ad-172a9"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.1 | 104.196.154.66 | 200 OK | 747 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (2139), with no line terminators Hash989d592ab804d106a3377b3e1fa3a2bf 1707cd67888d67d04a6ca9a9f80a46b13115a01b 58e1db6bd6da14d82101930aab70803a89eb7a2d4fcb6d9efd6cdbbcb7879663
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:27 GMT
etag: W/"6398e4df-85b"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js | 216.58.211.3 | 200 OK | 164 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js IP216.58.211.3:0
File typeASCII text, with very long lines (771) Size164 kB (163774 bytes) Hash57c909ab73fc27ec24f737bbf1cb1de8 89b2c02e9e7a9a764518fca545d3eec2044fd6d9 7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:09:34 GMT
expires: Tue, 30 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
age: 261050
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashbbeb609cbf32a8842bf96a124588e65e 40c0f548bcb714731f62df5a27cad21adef0463d 502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash42d54c8c12a2f90c448a11bf42800e86 bb66d35435411c825bfcd0a091f33b7d1708191e 3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/dosis/v27/HhyaU5sn9vOmLzloC_U.woff2 | 142.250.74.35 | 200 OK | 29 kB |
URL HTTP/2fonts.gstatic.com/s/dosis/v27/HhyaU5sn9vOmLzloC_U.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 29436, version 1.0\012- data Hash4e29aceac72b453671f585e88f69c24a 35115af67eca17e02698954f1533b69515ecbbf9 b9d88c1280c412b1bccb32e6d99da3369feeb3fae8b64900e7066a1829385699
GET /s/dosis/v27/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 11:58:14 GMT
expires: Fri, 02 Feb 2024 11:58:14 GMT
cache-control: public, max-age=31536000
age: 20531
last-modified: Mon, 11 Jul 2022 20:56:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2 | 142.250.74.35 | 200 OK | 36 kB |
URL HTTP/2fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 35660, version 1.0\012- data Hash0d0d3e5824e5e67a9e993960df2b67a9 328d67bb1d5899a7809df9f4385181863fd035f1 38da98e06ba18c4204f547d30572cd81a2dd3fd5438d306856d2617480ee8639
GET /s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 10:14:36 GMT
expires: Thu, 01 Feb 2024 10:14:36 GMT
cache-control: public, max-age=31536000
age: 113149
last-modified: Mon, 15 Aug 2022 18:07:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lora/v26/0QIhMX1D_JOuMw_LIftL.woff2 | 142.250.74.35 | 200 OK | 39 kB |
URL HTTP/2fonts.gstatic.com/s/lora/v26/0QIhMX1D_JOuMw_LIftL.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 39056, version 1.0\012- data Hashab20a3cbee44939ad33cb2d162484f23 f4df3e71cc8aebd85b6207d4ac35c76c602c2779 0a1dc89a4a29593bd35cc4811bfedd9765eeca4a9ef57323eec2cff14c9f9c5b
GET /s/lora/v26/0QIhMX1D_JOuMw_LIftL.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:06:14 GMT
expires: Sat, 27 Jan 2024 02:06:14 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:05:31 GMT
content-type: font/woff2
age: 574451
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/site-preloader.css | 104.196.154.66 | 200 OK | 167 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/site-preloader.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (33695), with no line terminators Size167 kB (167053 bytes) Hashaff5c26fb43381738432b2b3f5f3af68 93ff1db40023fdde4411ac1423da8991166282fc b2fa761ec0848c9682c1b815420f55e8f4683281777193bd027d29dba89ce0e8
GET /wp-content/themes/ronneby/assets/css/site-preloader.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-839f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2016/04/fav.png | 104.196.154.66 | 200 OK | 31 kB |
URL HTTP/1.1blazingvisuals.com/wp-content/uploads/2016/04/fav.png IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typePNG image data, 1013 x 1052, 8-bit/color RGBA, non-interlaced\012- data Hash4fd92993a61c7f24b1280c65072ae7c3 5645d06dd85f42d0b8f529c494d548e31371f6f7 0824296d3ebe5abe862fb45efc89e23c1df8561ec5d2952200120c33930e5209
GET /wp-content/uploads/2016/04/fav.png HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 17:40:24 GMT
Content-Type: image/png
Content-Length: 30988
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Tue, 06 Dec 2016 12:25:22 GMT
ETag: "5846ae32-790c"
Cache-Control: public, max-age=31536000
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.6 | 104.196.154.66 | 200 OK | 47 kB |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.6 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeUnicode text, UTF-8 text, with very long lines (65527), with no line terminators Hashaa2affedcabeb375c737b46b0bd892c9 50017c1db3fffd99371ac85a24d89aa438e499e5 9d847f8f2d58c8c4b2b27cbf082aa04719ba96c5f89b7ddcb0ab7b7d3884a756
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.6 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:26 GMT
etag: W/"6398e4de-39996"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/droidserif/v19/tDbK2oqRg1oM3QBjjcaDkOr4nAfcHg.woff2 | 142.250.74.35 | 200 OK | 20 kB |
URL HTTP/2fonts.gstatic.com/s/droidserif/v19/tDbK2oqRg1oM3QBjjcaDkOr4nAfcHg.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 20452, version 1.0\012- data Hash748e4474d6c6b46abba5a50f0a986152 575fd87ae9167d233d8c024ade8544d09c1b9eef 722d1d506241600936dd8a2bd82430e214405cefb4ee2496194ddedc92f0d193
GET /s/droidserif/v19/tDbK2oqRg1oM3QBjjcaDkOr4nAfcHg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20452
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 01:05:12 GMT
expires: Fri, 02 Feb 2024 01:05:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:27:49 GMT
content-type: font/woff2
age: 59713
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/woocommerce.css | 104.196.154.66 | 200 OK | 32 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/woocommerce.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (65536), with no line terminators Hash87b36bc448f10f0fed91145a9077bd29 daeed538839fb597a514f8455c1078320224b18b 8c6ed2dc66ca6c3a8bc67ce2a14fdc611780296c338b2bb37f70897ff1a7b3d1
GET /wp-content/themes/ronneby/assets/css/woocommerce.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 01 Feb 2019 00:26:05 GMT
etag: W/"5c53921d-26c9c"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3 | 104.196.154.66 | 200 OK | 26 kB |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeUnicode text, UTF-8 text, with very long lines (5178), with CRLF line terminators Hash3f1dc5add0481836c0063a2a6dd5c50b 3698d938896528dcca04325a79b92b4d305735d0 c69475fbd17857749238ee1632c07496994c4699dc6bd1eb7ef1b1ae28cebc6a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 05 Dec 2018 11:07:48 GMT
etag: W/"5c07b184-9b8c"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/app.min.js | 104.196.154.66 | 200 OK | 17 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/app.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeUnicode text, UTF-8 text, with very long lines (49561), with no line terminators Hash69105726d221bddd68e2075d2543b33b ffc41184dcdc3a3326190bd8f3d5a32a64ad726f da56125b9c16d0c0815ba44429003a9cd4e162c373a1ac870b554e8bdecfbd57
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/app.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-c19a"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-includes/css/classic-themes.min.css?ver=1 | 104.196.154.66 | 200 OK | 628 B |
URL HTTP/2blazingvisuals.com/wp-includes/css/classic-themes.min.css?ver=1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Hashd30c4e54e6b8255078cdbac5a4edb3ca 66b596b3ea9c1fb454909e3a7919ca9402e27965 b91d751980a61e4d6fbc8b242c7511ce9dce914b95b22f143d71f424581d0b9d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
last-modified: Tue, 25 Oct 2022 13:45:16 GMT
etag: W/"6357e86c-d9"
cache-control: public, max-age=31536000
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-92773120-1&cid=346093581.1675359652&jid=984138337&gjid=1573240171&_gid=1601792475.1675359652&_u=IEBAAEAAAAAAACAAI~&z=1962462289 | 74.125.205.154 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-92773120-1&cid=346093581.1675359652&jid=984138337&gjid=1573240171&_gid=1601792475.1675359652&_u=IEBAAEAAAAAAACAAI~&z=1962462289 IP74.125.205.154:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-92773120-1&cid=346093581.1675359652&jid=984138337&gjid=1573240171&_gid=1601792475.1675359652&_u=IEBAAEAAAAAAACAAI~&z=1962462289 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://blazingvisuals.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 02 Feb 2023 17:40:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2dc2e297877f6332a114de88eeeaca61 cc91e58f3dd132b078223d21cd3177f0819e40e7 94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 17:40:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha8d45deaa7ebfcd996c2055dae592ab8 55befe074589fe7b39757c145968058162a8fc6b 50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5482
Expires: Thu, 02 Feb 2023 19:11:48 GMT
Date: Thu, 02 Feb 2023 17:40:26 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5955
Expires: Thu, 02 Feb 2023 19:19:41 GMT
Date: Thu, 02 Feb 2023 17:40:26 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8913af0be619500295008bb91f506660 a7b8068ba9aa506205a295b24458c2616997a0d1 6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10289
Expires: Thu, 02 Feb 2023 20:31:55 GMT
Date: Thu, 02 Feb 2023 17:40:26 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5955
Expires: Thu, 02 Feb 2023 19:19:41 GMT
Date: Thu, 02 Feb 2023 17:40:26 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd4e95d0d8982bcd07804baf6fc88231c 5027abda0875bd2529dd4d6691784c74da71a9ee 373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7496
Expires: Thu, 02 Feb 2023 19:45:22 GMT
Date: Thu, 02 Feb 2023 17:40:26 GMT
Connection: keep-alive
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.hoverdir.min.js | 104.196.154.66 | 200 OK | 1.7 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.hoverdir.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (3439), with no line terminators Hashc46eb84d9f082f04a8a73360077b79ab 41d076659fc672defa0a0bc9a0562b06a8a3794e 1fbf9739f6e9fbc846f4fe2c36726168565f34263a2348d12be2f1d2e764dce8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.hoverdir.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-d6f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.isotope.min.js | 104.196.154.66 | 200 OK | 5.5 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.isotope.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeHTML document, ASCII text, with very long lines (16099), with no line terminators Hashb7ac96aa597f5d3ba8f877d92f09221e 913a3099e20723eea602844135c7011a69cceeb4 979911fe4a4c04dc95ed615f9a0f338c7dd1ed4884f71b47fddde4d48bfeb7ca
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.isotope.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-3ee3"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10253
Expires: Thu, 02 Feb 2023 20:31:19 GMT
Date: Thu, 02 Feb 2023 17:40:26 GMT
Connection: keep-alive
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.hoverdir.init.min.js | 104.196.154.66 | 200 OK | 674 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.hoverdir.init.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (682), with no line terminators Hash63545e548b09e86c859778e779a17296 7a63a257bf672745094caca1edff4e9f492584df f43571f15757f46a03b956eb7b8ec3248aa9281ac30c80bed6232193e53fea00
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.hoverdir.init.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-2aa"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.isotope.news-module.js | 104.196.154.66 | 200 OK | 1.2 kB |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.isotope.news-module.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (398) Hash86aeb947e9632b1dddb29177bbf9dd68 f196112145944969ffe4ef8aa3ca8f1f3b9a56ee d7e61406b15f15a09a1d380fec6a624eb0bd0d85d1df58cce67fa5f163a4516a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.isotope.news-module.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-80d"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2016/12/hero-image.jpg | 104.196.154.66 | 200 OK | 871 kB |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2016/12/hero-image.jpg IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=16, height=3022, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 6s, orientation=upper-left, width=3565], progressive, precision 8, 1903x500, components 3\012- data Size871 kB (871394 bytes) Hasha8b0ca09cef551323cc70cf6cbec9175 60f25509224b11820f7e4ae81b842e27e4489c82 069b2c28428fdf5fc19a212400d218ce651cb17f0210153bc079f5450b7d80bf
GET /wp-content/uploads/2016/12/hero-image.jpg HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Cookie: _ga=GA1.2.346093581.1675359652; _gid=GA1.2.1601792475.1675359652; _gat=1; PHPSESSID=2197fc6788c0c0e4c075aab60dd755d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:25 GMT
content-type: image/jpeg
content-length: 871394
last-modified: Tue, 06 Dec 2016 12:25:22 GMT
etag: "5846ae32-d4be2"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/visual-composer.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/visual-composer.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/assets/css/visual-composer.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 01 Feb 2019 00:26:05 GMT
etag: W/"5c53921d-707ef"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/jquery.isotope.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/jquery.isotope.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/assets/css/jquery.isotope.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-439"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/woocommerce_hack.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/woocommerce_hack.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/woocommerce_hack.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-d93"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/dropdown.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/dropdown.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/dropdown.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-1187"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/prettyPhoto.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/prettyPhoto.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/assets/css/prettyPhoto.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-5f97"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
etag: W/"62551487-48b9"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-includes/js/jquery/jquery.form.min.js?ver=4.3.0 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-includes/js/jquery/jquery.form.min.js?ver=4.3.0 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-includes/js/jquery/jquery.form.min.js?ver=4.3.0 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:38:46 GMT
etag: W/"63b84e96-3e69"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 01 May 2020 14:11:38 GMT
etag: W/"5eac2e1a-3868"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:41:59 GMT
etag: W/"63b84f57-1afe4"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8.3 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8.3 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8.3 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:09 GMT
etag: W/"63b84ead-ff35"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/hammer.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/hammer.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/hammer.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-32b1"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.sidr.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.sidr.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.sidr.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-f60"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.11.4 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.11.4 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.11.4 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 01 May 2020 14:11:43 GMT
etag: W/"5eac2e1f-5cf"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.easing.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.easing.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.easing.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-f92"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/post-like.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/post-like.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/post-like.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-2e6"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
etag: W/"632879b8-15e54"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:27 GMT
etag: W/"6398e4df-bd5"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.mega-menu.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.mega-menu.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.mega-menu.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:55 GMT
etag: W/"63b84edb-3ead"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/droidserif/v19/tDbV2oqRg1oM3QBjjcaDkOJGiRD7OwE.woff2 | 142.250.74.35 | 200 OK | 0 B |
URL HTTP/2fonts.gstatic.com/s/droidserif/v19/tDbV2oqRg1oM3QBjjcaDkOJGiRD7OwE.woff2 IP142.250.74.35:0
GET /s/droidserif/v19/tDbV2oqRg1oM3QBjjcaDkOJGiRD7OwE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:06:28 GMT
expires: Sat, 27 Jan 2024 02:06:28 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:47:46 GMT
content-type: font/woff2
age: 574437
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby_child/style.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby_child/style.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby_child/style.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
last-modified: Tue, 06 Dec 2016 12:23:05 GMT
etag: W/"5846ada9-fd"
cache-control: public, max-age=31536000
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.scrollTo.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.scrollTo.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.scrollTo.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-a5d"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/?wc-ajax=get_refreshed_fragments | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/?wc-ajax=get_refreshed_fragments IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://blazingvisuals.com
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:25 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
set-cookie: PHPSESSID=2197fc6788c0c0e4c075aab60dd755d1; path=/
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
x-pingback: https://blazingvisuals.com/xmlrpc.php
access-control-allow-origin: https://blazingvisuals.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
x-powered-by: WP Engine
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:27 GMT
etag: W/"6398e4df-72a"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/ | 104.196.154.66 | 200 OK | 0 B |
IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
x-pingback: https://blazingvisuals.com/xmlrpc.php
link: <https://blazingvisuals.com/wp-json/>; rel="https://api.w.org/", <https://blazingvisuals.com/wp-json/wp/v2/pages/17540>; rel="alternate"; type="application/json", <https://blazingvisuals.com/>; rel=shortlink
x-powered-by: WP Engine
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 5
x-cache-group: normal
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/uploads/2015/08/heli.jpg | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/uploads/2015/08/heli.jpg IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/uploads/2015/08/heli.jpg HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:24 GMT
content-type: image/jpeg
content-length: 435542
last-modified: Tue, 06 Dec 2016 12:26:08 GMT
etag: "5846ae60-6a556"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/animation.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/animation.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/animation.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-dba3"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/styled-button.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/styled-button.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/assets/css/styled-button.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-3563"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
etag: W/"5fb4e3fe-2bd8"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=4.11.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=4.11.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=4.11.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:26 GMT
etag: W/"5846aeae-37f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:24 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 18 Jun 2018 10:33:28 GMT
etag: W/"5b278a78-da01"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=4.11.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=4.11.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=4.11.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:26 GMT
etag: W/"5846aeae-4900"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.11.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.11.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.11.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:19 GMT
etag: W/"5846aea7-b1c11"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/foundation.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/foundation.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/foundation.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-11daa"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/headroom.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/headroom.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/headroom.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-1022"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/min-css/ultimate.min.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/min-css/ultimate.min.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/min-css/ultimate.min.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:42 GMT
etag: W/"5846aebe-54996"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/app.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/app.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/assets/css/app.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 01 Feb 2019 00:26:02 GMT
etag: W/"5c53921a-10c2bf"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/css/mobile-responsive.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/css/mobile-responsive.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/assets/css/mobile-responsive.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:12 GMT
etag: W/"5846aea0-18703"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.6 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.6 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.6 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:26 GMT
etag: W/"6398e4de-28c3"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/slick/slick.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/slick/slick.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/slick/slick.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:42 GMT
etag: W/"5846aebe-14fc"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/css/options.css | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/css/options.css IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby/css/options.css HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Thu, 02 Feb 2023 17:40:11 GMT
etag: W/"63dbf57b-bc9"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:27 GMT
etag: W/"6398e4df-2521"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.1 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.1 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.1 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Dec 2022 20:47:27 GMT
etag: W/"6398e4df-b7a"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby_child/js/main.min.js?ver=1481026985 | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby_child/js/main.min.js?ver=1481026985 IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /wp-content/themes/ronneby_child/js/main.min.js?ver=1481026985 HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
last-modified: Tue, 06 Dec 2016 12:23:05 GMT
etag: W/"5846ada9-20"
cache-control: public, max-age=31536000
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/min-js/ultimate.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/min-js/ultimate.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/inc/vc_custom/Ultimate_VC_Addons/assets/min-js/ultimate.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2016 12:27:42 GMT
etag: W/"5846aebe-233ab"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.prettyPhoto.min.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.prettyPhoto.min.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.prettyPhoto.min.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-56c4"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.chaffle.js | 104.196.154.66 | 200 OK | 0 B |
URL HTTP/2blazingvisuals.com/wp-content/themes/ronneby/assets/js/jquery.chaffle.js IP104.196.154.66:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/ronneby/assets/js/jquery.chaffle.js HTTP/1.1
Host: blazingvisuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://blazingvisuals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 17:40:22 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 06 Jan 2023 16:39:54 GMT
etag: W/"63b84eda-ff1"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
0.0.0.0