| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd27590a1d3cbe1e9632b8ae92aaae3f4 202b34e8a0c3b88c8826fd56c6227b34f2cd6f46 6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9476
Expires: Sat, 19 Nov 2022 01:20:13 GMT
Date: Fri, 18 Nov 2022 22:42:17 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash67f53a639d57dd6237b5be86fe4f6c1b 287f09532dc331228d09c20b75f4160e91e9800a 41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6183
Cache-Control: max-age=135113
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:17 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 12:14:10 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3a38b6dd8a4cc335c026aebf2ed348b6 8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8 8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7968
Expires: Sat, 19 Nov 2022 00:55:05 GMT
Date: Fri, 18 Nov 2022 22:42:17 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash567df7db606cf5d0871aa5bc9311b6da 4263faac7cbab2fcaf6661911dcad5091c06be17 e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 21:45:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3434
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: l5C3P1m/6nyBR60EocIgyRb43HV7OM3eSWQzwfmSg+DetUrt+9gTGeSxLa9vfg87Hy5H3LfmKJs=
x-amz-request-id: XTTVP2RZQ1HFHJ1R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 21:53:05 GMT
age: 2952
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 22:42:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash02e97791482a416959a677a9cc5c4d2f cfda00a29b883df424979891314f843b5d8eef06 b539ed96463cb7fcca351e9bc82c87582e245e4351290283527b6172a95a10d6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B539ED96463CB7FCCA351E9BC82C87582E245E4351290283527B6172A95A10D6"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 19 Nov 2022 04:42:18 GMT
Date: Fri, 18 Nov 2022 22:42:18 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 21:44:49 GMT
cache-control: public,max-age=3600
age: 3449
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfe40cc6ea871d80382b6082111393fbe 281f75d0a35dc8ef908bb0500e57abd86bd5388e 6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2296
Cache-Control: max-age=126174
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:18 GMT
Etag: "63774b30-1d7"
Expires: Sun, 20 Nov 2022 09:45:12 GMT
Last-Modified: Fri, 18 Nov 2022 09:06:56 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| expert-freelancer.com/ut/index.php?qbot.zip | 192.185.129.139 | 301 Moved Permanently | 0 B |
URL HTTP/2expert-freelancer.com/ut/index.php?qbot.zip IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /ut/index.php?qbot.zip HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://expert-freelancer.com/ut/?qbot.zip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 0
content-type: text/html; charset=UTF-8
date: Fri, 18 Nov 2022 22:42:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.70.239.215 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.70.239.215:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: foq8p9g+pgp1R7RnrNgyDw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: b9T5qG6ELU6jAs8zhQGs4AupL+Y=
|
|
| expert-freelancer.com/wp-includes/css/classic-themes.min.css?ver=1 | 192.185.129.139 | 200 OK | 189 B |
URL HTTP/2expert-freelancer.com/wp-includes/css/classic-themes.min.css?ver=1 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash5a18e16eb01cbaa862eb32e6b77bedb2 3abf9b913cc9f558f02cba7c9b822f8d1812cb96 d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 19:15:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:18 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 189
content-type: text/css
date: Fri, 18 Nov 2022 22:42:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07caf241d63e15426cd26434ef88e9dd ec289ab860ffccd49ce9a62d2c47c59dc181fbd5 d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd3ba0eba720a8e5904bee6e804873c24 df1f9c79e39f777ab12225af0af60b9f26af6485 76500b32cbac4ad40e3f42c7dfd46832f3854ba88c3a6d5a9d2b5633e8e1f27b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6LdR1NoSAAAAADsdkFdrugRUiQB37PptaFGwIOvg&ver=3.0 | 142.250.74.164 | 400 Bad Request | 119 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LdR1NoSAAAAADsdkFdrugRUiQB37PptaFGwIOvg&ver=3.0 IP142.250.74.164:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text Hash96612d2b1b529ecfcf09798c3eb100bf 4f32d5d3ccf4d44ae71309dfa8d6f9d396614a27 7c58bfa17d0c600b7455e6bfb3d8371fbf93da20a7a53ed1efad37d692f1cba0
GET /recaptcha/api.js?render=6LdR1NoSAAAAADsdkFdrugRUiQB37PptaFGwIOvg&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 18 Nov 2022 22:42:19 GMT
expires: Fri, 18 Nov 2022 22:42:19 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 119
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| expert-freelancer.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 192.185.129.139 | 200 OK | 5.3 kB |
URL HTTP/2expert-freelancer.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15660) Hash710f8b142ea44c0682dc2c30f318f065 49144e9b3a76d3d383b1d4359cf7a25e947f4233 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 11:26:24 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:18 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5321
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc15be7bf1c6987951ddd348d6f6b4db1 9faac1fb81abc8fce6d4ae81777c76b8bc11e9b0 7f1d01e3fc0b69e331fd30326ea8fd9b1e3e06a0a93ae4768e7addd03a121025
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/developer.css?ver=1668811338 | 192.185.129.139 | 200 OK | 128 B |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/developer.css?ver=1668811338 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashe0cd8240339aaf4f65174cb3bd9e76b7 09a1a01bfd3b26405d9eced1f5b692f1b389a2f3 f090f04a96c6d41240c96517ef0876133c65a84469118cab5583356389dfe36d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/developer.css?ver=1668811338 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 18 Nov 2022 12:51:57 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 128
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/aos.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 2.2 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/aos.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (26053), with no line terminators Hash0813dc07eb1522349ea7c501238c5cec d6539ed824d358a37ae97ff8ba46d20f84bc39d1 34b996cb44078494a34ab2ba54269279d36dc29b8078db5678201abedf9aff8c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/aos.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2191
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/sal.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 1.1 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/sal.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (7508) Hashc67d290546825283f257dc31a5305770 c138d36030c88bf7e5ff2baa9403cd4dc850a52a 5a3457357324b2e60993d8508f32632641ca2cf11904c1c472450820b7164f8a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/sal.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1052
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/magnific-popup.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 2.2 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/magnific-popup.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash5691b07253c4a30382130c2da4be8343 4c12d34016c7061965c996599c4086683958e0f1 095326e797678e4aa4be8217bf991180f7b79cdcce552897123ffa68981a0747
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/magnific-popup.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2190
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/slick.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 552 B |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/slick.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashb23216c0d2006c6e3e5d43865a95d99e 1e192be982f25f4f452cb50a79023c808c808fc2 bef312ca48ba2eb4621577c04d7bd1faf06c962034a136b69d8fd57c013864b6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/slick.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 552
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/odometer-theme-default.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 576 B |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/odometer-theme-default.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash9ddb7bab5bad00351f4d60e14e24ed08 54ce99ae95f035fe0e19b428d3999f872604c3f5 511fcd89e47e3d1974008ee1eb91bc667ca345f6fc68797a05f25c1c60ba4ab7
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/odometer-theme-default.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 576
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/tilt.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 2.9 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/tilt.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (340) Hash1dc089526937f28241567cf7cd8947e4 f47557ba0c7676b26cd8971e075261e14edb994a 6b6aabb26686e1f07764696800f79131b9e780c01463879e394c42b499430559
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/tilt.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2947
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/style.css?ver=6.1.1 | 192.185.129.139 | 200 OK | 4.5 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/style.css?ver=6.1.1 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeassembler source, ASCII text Hash55a41ecbdadc9327477933083749317f e79946118ebb08b2f5b904d0c03fea0b6e278af6 02609969b87b4e8dad93e174e39bf90d4d89f87ca830a685a5dd30d3f7027b6c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/style.css?ver=6.1.1 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4527
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/aos.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 6.7 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/aos.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (14243), with no line terminators Hash6c3cfb7874864971fb710f9d42c6856c 492b4d6ef0fb0ded9b791e702a4029c4abd1c724 7f82f351413dcc1a35e866c5b818aa89e7293db6fcded089bcc4f9543949a126
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/aos.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 6704
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/sal.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 1.4 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/sal.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3281) Hash0673477a9b66484b4f8172d7e1e03ed4 1dfccc781570b628b35bc9ce90b0ecb960e64a0d 86768a36fc3de87e5da569a2ab0c2f22cd5e2f333f27d0dd8636e84792a31eb4
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/sal.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1419
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/jquery.magnific-popup.min.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 9.2 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/jquery.magnific-popup.min.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (20087) Hash7a10ae63b238729dc4da7f7bd8986219 654c47168dca0ec7080f6c57e8c4482b57f879d4 b782185399b361358f7c409d6f23f22d45f695dcbb63876c35752c7b1de72db3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/jquery.magnific-popup.min.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 9204
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/jquery.countdown.min.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 2.5 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/jquery.countdown.min.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4136) Hashe978b6bd5b61bed87b51c718018d6112 6aaf0f27773be244ec09e695340eb51d552ea039 667240a5e21aca4de309373340050808aea24b0797ea2024d6eceba78aeeca26
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/jquery.countdown.min.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2529
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/slick-theme.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 1.1 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/slick-theme.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash6b12b5a6860a7a7a67f3c3cb4aa988a3 e0fc2ee2cb2a952a9a0c50180aedb0700b3a6aa4 6add4df35c3900b569906c8aa4d2ccc48b95e390a6293e62cebdc6a68ac1007a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/slick-theme.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1050
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 192.185.129.139 | 200 OK | 4.6 kB |
URL HTTP/2expert-freelancer.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4618
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/has-elementor.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 4.0 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/has-elementor.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (612) Hasha5672319a5fb4db12798c681961f1dcd 0830e61864555752011de11cbc2adbc5786ab9da d3ef5234b8ba9c8a91ad31f9f95250ee35350e95c0e87c2b4fd3831b1c4bedde
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/has-elementor.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4003
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 192.185.129.139 | 200 OK | 7.6 kB |
URL HTTP/2expert-freelancer.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (17819), with no line terminators Hash66c68f2158dcf7d97a02f3719a17aab0 fdb04fb4c632b9fb4275006a4e402cd0d4fa393a e4b360f0e6ae1afc06f05f958e8696e5ae45257912bc2ab0b9334bd1382a51aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Sep 2022 21:13:30 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7621
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/app.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 3.4 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/app.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (545) Hashf84fe170f4ac1ded058eb38bb9ae4d99 1e8236649e267a18c2ef94f02aa5e0aba653b8d2 58157103d2a0c59f70bec803ac3c414485329f1623e05dbd5afdd61b35fad5a6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/app.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3377
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/woocommerce.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 13 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/woocommerce.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash1d277676df95d8f365f998f7c707fe42 1de01b8bd9ccf89332b84d3ee7988d2baa5bb434 e122d6b53c3b26a06fd6f559268a2973b3866fe79a4a4fcb5c1117e29eaa3844
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/woocommerce.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 13000
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/uploads/2022/11/under_construction.svg | 192.185.129.139 | 200 OK | 68 kB |
URL HTTP/2expert-freelancer.com/wp-content/uploads/2022/11/under_construction.svg IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeSVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators Hash833ba83439501540f848061dbda0a31a f93b0665e719fa5977b658d60d1a460b76c54d63 6c075363b40cd6640a8ff57cde37680b5a2156120f196b348ba9e117d62b2e32
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2022/11/under_construction.svg HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 13:19:17 GMT
accept-ranges: bytes
content-length: 67903
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/uploads/2022/11/ExpertFreelancer-logo-2-1.png | 192.185.129.139 | 200 OK | 15 kB |
URL HTTP/2expert-freelancer.com/wp-content/uploads/2022/11/ExpertFreelancer-logo-2-1.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 697 x 117, 8-bit/color RGBA, non-interlaced\012- data Hashf628d39bc2a3c5506476f4397ea4bfa7 3f825b2f2e7293c72c3161a60baadf7168793a0c 1768f317613407de23803d7578df4e2c84d8c0a58220725341e6362ac1a5afff
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/11/ExpertFreelancer-logo-2-1.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Nov 2022 12:10:16 GMT
accept-ranges: bytes
content-length: 14748
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/uploads/2022/11/ExpertFreelancer-logo-1.png | 192.185.129.139 | 200 OK | 15 kB |
URL HTTP/2expert-freelancer.com/wp-content/uploads/2022/11/ExpertFreelancer-logo-1.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 697 x 117, 8-bit/color RGBA, non-interlaced\012- data Hash6e0a24bd66281297700d7f297823eca3 112c306f447d9562d5aa6834d2530c0b4f6afaef d14d4f6ce556dfac03b316307cdcf1c8eee85535c3edac1dae475a05cddf10d5
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/11/ExpertFreelancer-logo-1.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 13:14:30 GMT
accept-ranges: bytes
content-length: 14790
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 | 192.185.129.139 | 409 Conflict | 83 B |
URL HTTP/2expert-freelancer.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/uploads/2022/11/ExpertFreelancer-logo-1-1.png | 192.185.129.139 | 200 OK | 15 kB |
URL HTTP/2expert-freelancer.com/wp-content/uploads/2022/11/ExpertFreelancer-logo-1-1.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 697 x 117, 8-bit/color RGBA, non-interlaced\012- data Hashf628d39bc2a3c5506476f4397ea4bfa7 3f825b2f2e7293c72c3161a60baadf7168793a0c 1768f317613407de23803d7578df4e2c84d8c0a58220725341e6362ac1a5afff
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/11/ExpertFreelancer-logo-1-1.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Nov 2022 12:08:57 GMT
accept-ranges: bytes
content-length: 14748
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/images/coming-soon/line-4.png | 192.185.129.139 | 200 OK | 32 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/images/coming-soon/line-4.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 1682 x 445, 8-bit/color RGBA, non-interlaced\012- data Hash38d5c4bd71e9550438cbe0815dc0e20c ee3cc490fe2f44ef0d2456205e15c889f75e2e45 03f7c95aa835464d07ddbd3c713ce966a52c74244b93851824f4fcd003156e1d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/images/coming-soon/line-4.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
content-length: 32323
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/images/coming-soon/bubble-28.png | 192.185.129.139 | 200 OK | 15 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/images/coming-soon/bubble-28.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 714 x 970, 8-bit/color RGBA, non-interlaced\012- data Hasha4286a9ac928cea9236e8b9a338f70bd 14f4508e973244426ce3a321b79a8ddf0c30321d eebcd25ba551e3166a62a4c11dce6c504a4ae78dd4fe5dbd7baa60164f5fd926
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/images/coming-soon/bubble-28.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
content-length: 14619
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 192.185.129.139 | 200 OK | 2.1 kB |
URL HTTP/2expert-freelancer.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (5477) Hashf0bd7ad12acdee26cbb2701c1ba3610b 53c5d15129860868b60b74cb010b2c6050a64f69 e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Jun 2020 00:23:28 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2103
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/odometer.min.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 4.3 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/odometer.min.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10241) Hasha67fc28b24017d1cb97c372082db2dce 42a542e94abb1ca5bd355aee315416f1ca49e23d 3a8edbcce024b598040c6c5de82275278a713fe2ee849a05d51b6497d165dd93
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/odometer.min.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4337
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/jquery-appear.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 1.4 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/jquery-appear.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash3e671bd2194b6a221e9ec9709567c038 fc5b3ea29e76cdcf6bf87bc4f465e1a60198a527 d98a85a613645d645aa4492c06f488ae55d94471626d2f1e4943835eac58decf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/jquery-appear.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1445
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 192.185.129.139 | 200 OK | 2.7 kB |
URL HTTP/2expert-freelancer.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6475), with no line terminators Hash45bd1d6f7fc3a4069fc6fd400b90c961 903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 17:34:30 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2675
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/slick.min.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 14 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/slick.min.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (42862) Hashe61b26be7b27fbf2a5c2f479364c12b8 ff046102856e16854639a9862521c193fa05e9d7 19f098db827ce2943ab549c6fb9b142c4cc70aa9ecd7d3afc657a3a0eed8be88
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/slick.min.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14332
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/isotope.pkgd.min.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 13 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/isotope.pkgd.min.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (32019) Hash79bdc8a5c2a9c6ba42ef1ec8ba415eec 260a40aaafeca5df5fedf236d22dea4d175f1dde 476c850c6c72f0e91c30758823a3e2959dff3c03d30accf5b026422dc824ad65
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/isotope.pkgd.min.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 13105
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 | 192.185.129.139 | 409 Conflict | 83 B |
URL HTTP/2expert-freelancer.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 | 192.185.129.139 | 409 Conflict | 83 B |
URL HTTP/2expert-freelancer.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 | 192.185.129.139 | 409 Conflict | 83 B |
URL HTTP/2expert-freelancer.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.8 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://expert-freelancer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:30:59 GMT
expires: Thu, 16 Nov 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 184280
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9509
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:42:19 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9509
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:42:19 GMT
Connection: keep-alive
|
|
| expert-freelancer.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 192.185.129.139 | 200 OK | 47 kB |
URL HTTP/2expert-freelancer.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash49bbf54b168f80a76de9f174ac6286fa 0f8c7a89dff8798eb9f6ebf1b20c744325771d1b 19f1496005c3e86d140a399e91ec5408682a2b2799d810260a165971dc9904a5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Sep 2022 19:46:24 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/dmsans/v11/rP2Cp2ywxg089UriAWCrCBimCw.woff2 | 216.58.207.195 | 200 OK | 18 kB |
URL HTTP/2fonts.gstatic.com/s/dmsans/v11/rP2Cp2ywxg089UriAWCrCBimCw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 18240, version 1.0\012- data Hash715796ddd1637e1334588181b0e9cdb5 1246cb17f39f9d54b03540c8cfe6ba11e4084080 e6997f451bbf8012dea5fb3b9f2e974a2f86861364126915097d81096392c800
GET /s/dmsans/v11/rP2Cp2ywxg089UriAWCrCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://expert-freelancer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 08:03:55 GMT
expires: Thu, 16 Nov 2023 08:03:55 GMT
cache-control: public, max-age=31536000
age: 225504
last-modified: Thu, 21 Apr 2022 16:54:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash49115517a3f79b5092934e128d54c721 14582e35cacbfc2543587e546cb3b4faf2c898bf 0f9015683cacc252fb5e5053681da1b85b3dd0694e2cd04417e73e5e82ecac2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3962
x-amzn-requestid: 29b553ab-9ef2-44b8-aea9-b1582b207a6b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRWGKmIAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6e-3fb68804386112d17eba689d;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NlXk5HDtG5jJpocFatW40jmG60DcpFCl4o6MqkAPSHH13lP66E4d6w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 3954
etag: "14582e35cacbfc2543587e546cb3b4faf2c898bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9509
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:42:19 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash06c6e720bc9900b38e88cd72f739603e 22884cbc78622d6f78c1c3397c9b440946144a99 8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G_b9L1-WBsD1eh58iF6Cwh8ij3yZVOei6oIUjwdoKQzHLayBLJdv0A==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 16:26:42 GMT
age: 22537
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9509
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:42:19 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9509
Expires: Sat, 19 Nov 2022 01:20:48 GMT
Date: Fri, 18 Nov 2022 22:42:19 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg | 34.120.237.76 | 200 OK | 3.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd6b026c34985bbf2ebf89a62d0724c66 72369ebeccf447fa91ef77711d6297063c99777e e5598ada634274ab9995dedda8c1fd18344abcfdd49b3a1aaede0a86fafc0f40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3035
x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRcFOuoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xvVfLfP2DUilu7GSJMGArO90Kdoq5cPBVtmtyVjZmX5ZKnvOjpR_UQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 3954
etag: "72369ebeccf447fa91ef77711d6297063c99777e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc8f6118fc03f31862ff68fef8a2b9a7f 318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73 cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9FO1gkdftjvJFDvAlxwLD63BP-liwnS2MImVhVdjg83wi4xJdM73Kg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 3954
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb834de670098398062ac06865cfa82a4 6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4 9eefe7101330de28d8d0fdb3f17a5453f3368324fbacb9f3a36826f76b7c9bde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5226
x-amzn-requestid: c0655cd4-83f6-4c7c-97b6-2847f38df126
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRwFPwoAMFV5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa71-5f7eca026395cbe72daed116;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gSAFmiB37Xf-Ytu7_BEwytLEY9rflh0ruTy-mU3vHQlS9Amx90qUcg==
via: 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 3954
etag: "6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e34e5df-e3b1-4670-9ba0-f2403f02010c.jpeg | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e34e5df-e3b1-4670-9ba0-f2403f02010c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2d658c05b4c8027fcd618510e09a3fb1 c9aa687d03ef0d1bd8ca2d024b1c0c22e53b57b0 89a4b61edc8a8e8d6db418731208c6e08ad987f1336e4c62f4fc0c4cd140d959
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e34e5df-e3b1-4670-9ba0-f2403f02010c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5097
x-amzn-requestid: ff66512d-5563-4824-badb-5d3bf4ad9e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QR6HXXoAMF7qA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa72-784a02bd76dd22987f137400;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xihx8hCMattIRiLwxAz43PjTxdufkHAXbcMAJBeRv2MIXWLnxwS7cw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 3954
etag: "c9aa687d03ef0d1bd8ca2d024b1c0c22e53b57b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/fonts/fa-regular-400.woff2 | 192.185.129.139 | 200 OK | 152 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/fonts/fa-regular-400.woff2 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 152180, version 330.15859\012- data Size152 kB (152180 bytes) Hash75bfa97d821457d511efb2c85e8cf963 731c1f1daf0468b688418cdbefce8ad272f50972 3474add504634a2a1995bc8f3d2d539888df184f645800ed9faf2f567e9cad0c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/fonts/fa-regular-400.woff2 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/font-awesome.css?ver=1.4.5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
content-length: 152180
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: font/woff2
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/bootstrap.min.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 38 kB |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/bootstrap.min.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash97826582e2c7fb4ddbc7f251094c0ebd 4fd747919b5f5c8929a1dbb2ecc83259a02fc58f a44b111485fa9d6fa91240e60d9c80dbef462b432e6d3b8e0319483e985f0bef
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/bootstrap.min.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 | 192.185.129.139 | 409 Conflict | 83 B |
URL HTTP/2expert-freelancer.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/uploads/2022/11/cropped-favicon5-192x192.png | 192.185.129.139 | 200 OK | 10 kB |
URL HTTP/2expert-freelancer.com/wp-content/uploads/2022/11/cropped-favicon5-192x192.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hashc8e2285e1304e252076f455e160bf1dd 7dc15b7b3df6dcd55f21a53491d093843208d5bf 5df9c46b5538900c8344366517db15c675b5a2fe0ac7e6937485b2d37af984ab
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/11/cropped-favicon5-192x192.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Nov 2022 12:40:59 GMT
accept-ranges: bytes
content-length: 10236
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:20 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/uploads/2022/11/cropped-favicon5-32x32.png | 192.185.129.139 | 200 OK | 1.7 kB |
URL HTTP/2expert-freelancer.com/wp-content/uploads/2022/11/cropped-favicon5-32x32.png IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hasha23b02ff84d193f5669a94ec2dbbb360 ebec13e1dcaf29a2ed9aeae8e95e61da2701437e 55e8f395d81b31d079130e84fa515c46418243b9f0c442eb4e10513f6ddd5afa
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/11/cropped-favicon5-32x32.png HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Nov 2022 12:40:59 GMT
accept-ranges: bytes
content-length: 1695
cache-control: max-age=31536000
expires: Sat, 18 Nov 2023 22:42:20 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Fri, 18 Nov 2022 22:42:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8cf981b1ea47b981c73aa1f291be4d8a d18b869e1940841e9b03f66f5608e381f1727b37 3352a04b9596b594aeb5de3dc70047196a830e3ca79babf7c1b72ff1103b2d26
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7754
x-amzn-requestid: 2c21447c-03bb-4e50-9eeb-a8ae86c0d204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRmFuiIAMFjWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa70-7a7e65fc5d443a1d70feb62b;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:40 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MFN-Yhp70fPLS4R_tVxEvzt-YQ7COwXaXrmifEfXfpiC0epJHSJq7w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 3961
etag: "d18b869e1940841e9b03f66f5608e381f1727b37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 192.185.129.139 | 200 OK | 0 B |
URL HTTP/2expert-freelancer.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Nov 2022 00:59:50 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:18 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Fri, 18 Nov 2022 22:42:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/ut/?qbot.zip | 192.185.129.139 | 404 Not Found | 0 B |
URL HTTP/2expert-freelancer.com/ut/?qbot.zip IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /ut/?qbot.zip HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://expert-freelancer.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/html; charset=UTF-8
date: Fri, 18 Nov 2022 22:42:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/font-awesome.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 0 B |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/vendor/font-awesome.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/vendor/font-awesome.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/css/app.css?ver=1.4.5 | 192.185.129.139 | 200 OK | 0 B |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/css/app.css?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/css/app.css?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 18 Dec 2022 22:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/bootstrap.min.js?ver=1.4.5 | 192.185.129.139 | 200 OK | 0 B |
URL HTTP/2expert-freelancer.com/wp-content/themes/abstrak/assets/js/vendor/bootstrap.min.js?ver=1.4.5 IP192.185.129.139:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/abstrak/assets/js/vendor/bootstrap.min.js?ver=1.4.5 HTTP/1.1
Host: expert-freelancer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/ut/?qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 05:50:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 19 Nov 2022 04:42:19 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Fri, 18 Nov 2022 22:42:19 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Poppins%3Awght%400%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B0%2C800%3B0%2C900%3B1%2C700%26display%3Dswap%7CDM+Sans%3A0%2C400%3B0%2C500%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C700&subset=latin%2Clatin-ext&ver=1.4.5 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Poppins%3Awght%400%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B0%2C800%3B0%2C900%3B1%2C700%26display%3Dswap%7CDM+Sans%3A0%2C400%3B0%2C500%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C700&subset=latin%2Clatin-ext&ver=1.4.5 IP142.250.74.10:0
GET /css?family=Poppins%3Awght%400%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B0%2C800%3B0%2C900%3B1%2C700%26display%3Dswap%7CDM+Sans%3A0%2C400%3B0%2C500%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C700&subset=latin%2Clatin-ext&ver=1.4.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expert-freelancer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 22:42:19 GMT
date: Fri, 18 Nov 2022 22:42:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|